Architecture

Custody and disclosure

The phone holds the evidence. Your service receives the approved disclosure and owns its access decision. User-held presentation is part of the planned identity exchange.

User custody. Explicit disclosure.

Kenshiki supplies the SDK. The verifier and user-held presentation shown here are planned additions. Your service owns its access decisions.

Your user’s phone Kenshiki Identity SDK Your service Kenshiki verifier Purpose · scope Request Source identity Identity material Signing keys Evidence history Remains in user custody User approval This request Approved share Selected claims + request-bound proof Your access & retention rules
Your user’s phoneKenshiki Identity SDK Your serviceKenshiki verifier Source identity Identity materialSigning keysEvidence history Remains in user custody User approvalThis request Request Purpose · scope Approved share Selected claims+ request-bound proof Your access & retention rules

Approved disclosures may contain personal information. Your service controls retention of what it receives; withdrawing permission cannot erase copies already received.

Next: integration responsibilities →