An Identity State represents “how this identity looks right now”.

It has:

• version – spec version (e.g. 1)
• identity_id – same across all states of this identity
• control_key_commitment – commitment to the active control key(s)
• recovery_key_commitment – commitment to recovery mechanism
• attributes_root – Merkle root of attributes in the Vault
• policies_root – Merkle root of policies / authorizations
• state_nonce – random salt to avoid linkability / grinding
• timestamp – creation time of this state (logical or block height)
• prev_commitment – the previous state commitment (or 0 for genesis)

Only commitments / roots are public. Keys and attributes live in the Vault.