(aligned with this model)

Just so you see it end-to-end:

1. Wallet generates:
   • control_key
   • recovery_config
   • initial attributes (optional)
   • state_nonce, identity_id
2. Wallet builds sub-commitments:
   • control_key_commitment
   • recovery_key_commitment
   • attributes_root
   • policies_root (maybe empty)
3. Wallet computes identity_commitment using the equation above.
4. Wallet:
   • stores all private material inside Livre Vault
   • publishes (identity_id, identity_commitment, version, timestamp) to the registry
   • (optionally binds a livre_name to identity_id)
5. From now on, every proof references this identity_commitment.