The issuer layer packages approved claim objects into a portable PASSID credential with signature, expiry, optional zero-knowledge proof bindings, and revocation references.
Credential envelopes are signed with issuer keys so verifiers can check authenticity and schema integrity.
Credentials carry bounded validity periods and freshness metadata so institutions never rely on stale financial states.
Revocation references let institutions invalidate credentials when source conditions, sanctions state, or policy rules change.
{
"credential_id": "pid_7f3c9x2mab4k",
"issuer": "passid-issuer",
"claims": {
"income_stability": "stable",
"cash_buffer": "high",
"sanctions_clear": true
},
"signature": "ed25519",
"proof_binding": "groth16_optional",
"expires_at": "2026-03-11T09:14:00Z",
"revocable": true
}
{
"credential_id": "pid_7f3c9x2mab4k",
"issuer": "passid-issuer",
"holder_binding": "wallet_presentation",
"claims": {
"income_stability": "stable",
"cash_buffer": "high",
"sanctions_clear": true
},
"signature": "ed25519",
"proof_binding": "groth16_optional",
"expires_at": "2026-03-11T09:14:00Z",
"revocable": true
}