Core

Design principles

Status: informative. Document version 1.0-draft-1.

• Every disclosure level needs a grant, including L0. There is no ambient read or default permission.
• L1 may contain safe structure, roles and age bands. Identifiers still require their permitted higher level.
• The stored grant wins over token scope and request filters. A request can only narrow it.
• Read and contribution authority are separate, independently approved and revoked.
• Temporary context is a bounded overlay or additive state; expiry restores the baseline without a destructive edit.
• Advertising is optional, off by default, one read within 24 hours, limited to three confirmed entertainment-preference keys, with no retention, delegation or onward right.
• Each recipient gets its own handle and entry references. Canonical IDs and raw derivation evidence remain private.
• Portability transfers data and history, not executable credentials or consent authority.
• Provider and recipient claims are distinct. No implementation or certification follows from publishing a schema.
• The 30-key vocabulary 1.1 is closed and retains the original 27 keys from vocabulary 1.0. Broader candidates, credential presentations, emergency cards, registries and guardian/duress operation require later specifications.

The interpretation notes link these principles to their requirements. See versioning and changes for the review and compatibility process.

References to other standards and projects describe intended technical alignment only and do not imply endorsement or partnership.