V0.1

Identity Passport Specification v0.1

This specification defines an abstract identity and authority model plus one protected read operation: Resolve One Subordinate. Clauses with IP-* identifiers are candidate normative requirements for public review. They derive from accepted Architecture Decision Records (ADRs) and canonical contracts cited in each chapter. ADR references identify accepted architectural decisions; this publication does not alter the canonical records.

The specification does not define a universal request encoding, transport, assertion wire profile, public error schema, or independent certification scheme. Those decisions remain open. A profile can add wire details without changing the abstract authority rules.

Chapters

1. Scope and maturity
2. Terminology and identity relationships
3. Authority and non-inference
4. Lifecycle and privacy
5. Resolve One Subordinate
6. Binding and provisioning
7. Security and privacy considerations
8. Conformance and profiles

• Scope and maturity
• Terminology and identity relationships
• Authority and non-inference
• Lifecycle and privacy
• Resolve One Subordinate
• Binding and provisioning lifecycle
• Security and privacy considerations