A family of specifications, schemas and test vectors for a decentralized trust protocol rooted in encounters between people, published by the Real Life Organisation. It is layered: identity (a key-derived anchor per person and pairwise anchors), encounter (a ceremony in which two people confirm they met), trust, and access (groups as places, with policy and epochs), with delivery and replication kept behind ports. It follows the Decentralized Trust Graph work at Trust Over IP, binds Trust Spanning Protocol through a mediator adapter, and is the third generation of a protocol whose second generation runs in the Web of Trust app. Every document is an Editor's Draft .
LicençaSpecification text and vocabulary: CC BY 4.0. Library, schemas, contexts, test vectors, conformance suite, simulators and scripts: Apache-2.0. The second-generation Web of Trust app and Real Life Stack: MIT
Status de Dev 📝 Rascunho
Detalhe do Status de DevDraft (all specifications are Editor's Drafts, for example Identity 0.55 and Encounter 0.32; a reference library, conformance runner and browser simulators exist; the third-generation app is in preparation and the project says an independent implementation is 'the goal, not yet a fact')
ProprietárioThe Real Life Organisation (real-life.org); no legal form or seat is stated on the pages read
Órgão de GovernançaNone stated; specifications are reviewed in rounds by independent reviewers and feedback goes through the repository's issues
País Not stated by the project.
Ano de Início 2026
StackJavaScript reference library (published to npm) and Node reference engine; JSON Schemas, a pinned JSON-LD context, deterministic test vectors and a conformance runner; Ed25519 and X25519 keys derived from a BIP-39 mnemonic with HKDF-SHA-256; JCS canonicalization (RFC 8785); browser simulators
Financiamento Not stated by the project.
Última Investigação 12 de nov. de 2026
Visão de topologia
Esta ferramenta no centro e o que se relaciona diretamente com ela. Cada linha nomeia o tipo de relação.
Identidade soberana Atestações portáteis Portabilidade do grafo de confiança Grupos combináveis
Protocolo de Identidade Atributos
OrigensThe third generation of a protocol for building trust from in-person encounters; the second generation (wot-spec) runs in the Web of Trust app, and its users are to move to the third generation once their identities are migrated
Banco de DadosN/A: a specification; it names no transport and no CRDT, and defines replication and delivery as contracts behind ports
Linguagem de Consulta N/A
Formatos de DadosJSON documents with JSON Schemas and a pinned JSON-LD context; W3C Verifiable Credentials 2.0 with a Decentralized Trust Graph RelationshipCredential structure and Data Integrity proofs (eddsa-jcs-2022); JCS canonicalization
Suporte MóvelNot stated by the project; the third-generation app is in preparation
Suporte WebBrowser simulators are published; a web app (Web of Trust) implements the second generation
Aplicativos Nativos Not stated by the project.
TermosFree: CC BY 4.0 specification text and Apache-2.0 code
Fundos Not stated by the project.
Baseado EmW3C DID Core and Verifiable Credentials 2.0, the Decentralized Trust Graph credentials work at Trust Over IP, DIDComm and Trust Spanning Protocol (through a delivery adapter), and the project's own earlier generations
PermissõesOpen: CC BY 4.0 specification text; Apache-2.0 code
Autenticação e IdentidadeA did:key anchor derived from a BIP-39 recovery phrase, with pairwise anchors per relationship and a fresh challenge-based encounter ceremony in which both parties confirm
Modelo de ArmazenamentoKeys are restored from the recovery phrase, but state needs an encrypted copy at a storage service whose contract is still unwritten; otherwise a person starts anew
InteroperabilidadeMedium: aligns with Decentralized Trust Graph ceremonies and Trust Tasks; binds Trust Spanning Protocol through a mediator adapter that runs live; a replication contract maps p2panda, Keyhive, SECSYNC, NextGraph and Automerge (the mapping was not read)
Portabilidade de DadosKeys are portable through the recovery phrase; state portability depends on the storage-service contract that is not yet written
Governança e Tomada de DecisãoEditor-led: each draft is reviewed in rounds by an independent adversarial reviewer, every finding is triaged and answered, and a layer counts as converged when consecutive rounds produce no blocker-level findings
Maturidade / Padronização do ProtocoloEditor's Drafts (Identity 0.55.0-draft, Encounter 0.32.0-draft, dated 2026-10-27; Access 0.58, Delivery Contract 0.85); aligned with, but not submitted to, a standards body
Métodos DID Suportadosdid:key only (the anchor); did:key identifiers cannot rotate, so the community anchor rotates through generations with a pre-committed next key; did:peer:2 appears only in an informative interoperability check
Gestão de ChavesKeys derived from a 12 or 24-word BIP-39 phrase with HKDF-SHA-256 for Ed25519 signing and X25519 agreement; pre-rotation binding of the next anchor key; recovery must not require a custodian of key material
Tipos de CredenciaisEncounter credentials and cards (immutable), relationship credentials in the Decentralized Trust Graph form, trust and personhood predicates (draft)
Método de VerificaçãoData Integrity proofs (eddsa-jcs-2022) over JCS-canonicalized JSON with SHA-256; challenge-response in the encounter ceremony
Recursos de PrivacidadePairwise anchors aim for unlinkability, which the identity specification says holds until disclosed or stolen; storage services see sealed envelopes, sizes and timing
Métodos de AutenticaçãoAn in-person encounter ceremony with a fresh single-use challenge per enactment, confirmed by both parties; a fresh pair anchor per enactment
Mecanismo de RevogaçãoDevice revocation per group in the access layer; encounter credentials are immutable and not revocable; revocation of the person's anchor is not stated
Tipos de Agentes SuportadosPeople and their devices; groups as places; delivery services and mediators
Tipos de Carteira/ClienteThe second-generation Web of Trust app (production); a third-generation app is in preparation; browser simulators
Mecanismos de RecuperaçãoThe recovery phrase restores keys, not state; losing the phrase is cryptographically final; restoring state needs an encrypted copy at a storage service
Conformidade / RegulamentaçõesNone claimed: the encounter specification states that the protocol does not prove personhood; GDPR and eIDAS are not stated in the layers read
Protocolos de Troca de CredenciaisDelivery through contracts behind ports; the first adapter binds Trust Spanning Protocol through the VTI mediator; Trust Tasks follow the Decentralized Trust Graph framework
Estrutura de ConfiançaTrust grows from verified in-person encounters recorded as credentials, then a trust layer and personhood predicates (drafts); no accredited trust framework is stated
Modelo de CustoFree specification and open-source code; no commercial terms stated
Resistência à CensuraNot stated by the project; the specification names no transport and relies on delivery adapters
Relacionamentos
Como esta ferramenta se conecta a outras ferramentas e organizações, a partir de relacionamentos revisados pelo responsável pelos dados do OpenHaven. Descrevem como os projetos se conectam, não a qualidade deles.