Every app simply checks:
identity_root (permanent identity anchor)
state_commitment (current state snapshot)
- A zero-knowledge proof (from the user vault)
- A valid signature from a current control key
This means:
- No shared databases
- No personal data exposure
- Instant verification
- Universal compatibility
- Zero surveillance