Fail closed
No attributes are released without a typed acceptance command.
Build a policy-bound OpenID4VP request, present from any compatible wallet, and inspect every verifier gate before attributes reach your application.
Identity attributes with selective disclosure and key binding.
Ask only for what this transaction needs.
The interface exposes the same security gates as the Rust decision kernel. Mock responses stay visibly marked; production results require a configured cryptographic adapter.
No attributes are released without a typed acceptance command.
Client, nonce, transcript, holder key, and disclosure set stay linked.
Lean safety theorems and Tamarin protocol lemmas guard the boundary.