Stored privately in the Vault:

{
  "id": "address.country",
  "descriptor_id": "address.country",
  "value": "<encrypted blob>",
  "issuer": "did:l.iso.gov.pt",
  "valid_from": 1731900000,
  "valid_until": 1763436000,
  "metadata": {
    "format": "string",
    "proofable_as": ["age_check", "residency_check"]
  }
}

And the leaf commitment (public) is:

attribute_leaf = Hash(
    "LIVRE_ATTR_V1" ||
    descriptor_id ||
    value_commitment ||
    issuer_commitment ||
    validity_window
)

Where:

• value_commitment = Hash(plaintext_value)
• issuer_commitment = Hash(issuer_public_info)
• validity_window = (valid_from || valid_until)

The plaintext value is never exposed.