Goal

Initialize a new Identity with:

• control key
• recovery key
• optional initial attributes and policies
• initial commitment

Inputs

• control public key
• recovery public key (or policy)
• initial attributes? (optional)
• initial policies? (optional)
• user consent

Steps

1. Validate keys
   • Check key formats, supported algorithms.
2. Build initial trees
   • keys_root from control + recovery keys.
   • attributes_root from any initial attributes.
   • policies_root from any initial policies.
3. Compute commitment

identity_commitment_0 = H(
version,
keys_root_0,
attributes_root_0,
policies_root_0
)

1. Persist identity

   • Create Identity object with state = active.
   • Store encrypted attributes in Vault.
   • Store descriptor / policy references.

2. Emit StateTransition

StateTransition {
previous_commitment = null
new_commitment      = identity_commitment_0
diff                = "identity_created"
signed_by           = control_key
timestamp
}