User attributes (documents, facts, certifications) are stored in a
Sovereign Vault
.
Apps never see them
Vault produces hashed leaves →
attributes_root
Only the user can update or export proofs