Skip to main content
The Artifact

Identity standards, side by side.

OIDC · OID4VC · OID4VP · DIF Presentation Exchange · FROST. Pick a standard, see the receipt it produces, hover any field for the RFC it cites.

oidc
Dimension
OIDC
0.04–0.18 J
per call

Authentication & ID tokens

OpenID Connect Core 1.0 as the substrate for authentication. Discovery, dynamic client registration, ID token issuance with acr/amr mapped to ISO 29115 levels of assurance.

Sample receipt
JWP ReceiptPayload
kind "trust.id.token.issued"
alg ES256
acr urn:openid:loa:high
amr ["hwk","face"]
joules 0.072
cite "OIDC Core 1.0 §2 · OIDC Discovery 1.0 §4"
sig "ed25519:0x4f...c1a"
Anatomy — operational specs
Latency p99
186 ms
Token size
1.94 KB
Key rotation
JWKS, 12 h
Conformance
OIDC FAPI 2.0 baseline
vp
Dimension
OID4VP
0.08–0.32 J
per call

Presentation of verifiable credentials

OID4VP draft-21 carries the lender's presentation request and the wallet's vp_token response. Request objects are signed JWTs; responses are SD-JWT VPs with a key_binding_jwt.

Sample receipt
JWP ReceiptPayload
kind "trust.vp.token.exchanged"
response_mode direct_post.jwt
client_id_scheme x509_san_dns
nonce.entropy 256 bit
joules 0.118
cite "OID4VP draft-21 §6 · DIF PE v2"
sig "ed25519:0x4f...c1a"
Anatomy — operational specs
Definition size
2.1 KB
VP token size
3.7 KB
Round trips
2
Audience binding
aud=lender.example
vc
Dimension
OID4VC
0.20–0.55 J
per call

Issuance of verifiable credentials

OID4VCI draft-13 lets a credential issuer mint VCs to a holder wallet, with credential_offer + pre-authorized_code flow, batch issuance, and proof of possession over an ephemeral key.

Sample receipt
JWP ReceiptPayload
kind "trust.vc.issued"
format dc+sd-jwt
claims 27
pop.alg ES256
joules 0.214
cite "OID4VCI draft-13 §11 · SD-JWT draft-08"
sig "ed25519:0x4f...c1a"
Anatomy — operational specs
Credential size
4.6 KB
Batch size
1–16
Status mechanism
StatusList 2021 bitstring
Issuer DID
did:web:hr.acme.example
frost
Dimension
FROST
0.10–0.22 J
per call

Threshold signatures

FROST (draft-irtf-cfrg-frost-15) runs a 2-of-3 over Ed25519 between Sarah, the bank, and the title company. Two round trips for commitments and partials; output is a single 64-byte signature.

Sample receipt
JWP ReceiptPayload
kind "trust.frost.signed"
threshold 2-of-3
curve ed25519
ciphersuite FROST(Ed25519, SHA-512)
joules 0.142
cite "draft-irtf-cfrg-frost-15 · RFC 8032"
sig "ed25519:0x4f...c1a"
Anatomy — operational specs
Sig size
64 B
Round trips
2
Commitment
96 B / signer
Partial sig
32 B / signer
pe
Dimension
DIF PE
0.03–0.09 J
per call

Presentation Exchange definitions

DIF Presentation Exchange v2 expresses what the verifier wants in JSONPath constraints. One input_descriptor per credential type; submission requirements compose multiple definitions.

Sample receipt
JWP ReceiptPayload
kind "trust.pe.submission"
input_descriptors 1
constraints 8
fields.required 4
joules 0.041
cite "DIF Presentation Exchange v2 §4 · JSONPath RFC 9535"
sig "ed25519:0x4f...c1a"
Anatomy — operational specs
Definition size
2.1 KB
Filter dialect
JSON Schema 2020-12
Submission size
0.6 KB
Holder binding
required

TrustOS, in one line

identity, made inspectable.

Click anything. The same primitives that compose the rest of the Transaction Science family — receipts, joules, signed transport — show up here too. The family is one system.