Custody and disclosure
The phone holds the evidence. Your service receives the approved disclosure and owns its access decision. User-held presentation is part of the planned identity exchange.
User custody. Explicit disclosure.
Kenshiki supplies the SDK. The verifier and user-held presentation shown here are planned additions. Your service owns its access decisions.
This diagram covers planned presentation to your service. Proofing and issuance have their own disclosure boundaries: during planned issuance, the holder app re-sends stored proofing values to the issuer for checking. See issuance responsibilities. An approved presentation can include identity fields and evidence.
Approved disclosures may contain personal information. Your service controls retention of what it receives; withdrawing permission cannot erase copies already received.