Credential Authority
Issues, presents and verifies W3C Verifiable Credentials — with selective disclosure and on-chain anchoring.
What it does
The Credential Authority issues, presents and verifies W3C Verifiable Credentials — agent identity, verified-legal-entity and mandate credentials — signed by an Ed25519 platform issuer and anchored on Hedera. BBS selective disclosure lets a holder prove one fact from a credential without revealing the rest, and credentials can be revoked.
Inside Credential Authority
The core functions this engine provides across the Trust Fabric.
Credential Authority composes with the Trust Fabric
Every engine is independently useful and interoperates through one API-first Trust Fabric — so identity, evidence, policy, risk and certification stay consistent across your AI estate.
Related engines
Policy Engine
The deterministic core: composes Standards & SOPs from atoms and returns allow / observe / block / escalate — no LLM in the decision.
- Atom → molecule → SOP/Standard
- allow / observe / block / escalate
- Deterministic & re-derivable
- Live edits, no redeploy
Governance Engine
The authorize gate that runs the policy on every signed action, in cooperative or trustless mode, with human-in-the-loop escalation.
- The authorize gate (MAGP)
- Escalation → owner approval
- Standards compliance check
- Cooperative & trustless modes
Action Passport
A signed, single-use proof that one exact action was authorized — bound to that authorization alone, carrying no raw payload content.
- Issued only on allow / observe
- Bound 1:1 to a single authorization
- No amount, merchant or payload data
- Paired Execution Receipt proves payloadMatch
See Credential Authority in action
Book a demo and see how the platform establishes trust across your AI systems.