Update Attributes
Goal:
Add, modify, or revoke attributes while preserving identity continuity.
Inputs:- identity_id
- Authenticated user session (Control Key)
- Attribute changes (add / update / revoke)
- Optional external attestations
Steps:
Current attributes_root, keys_root, policies_root.
Apply operations
- For each operation, update attribute leaves and encrypted values in the Vault.
- User (or issuer) submits attribute changes to the Vault.
- Vault verifies issuer permissions where relevant.
- Vault updates the Attribute Tree leaves.
- New
attributes_root is computed.
vault_state_root is updated (versioning, timestamps).
- New
identity_commitment is derived.
- Previous commitments are stored in
identity_history.
Rebuild attributes_root
attributes_root_1 = MerkleRoot(updated_attribute_leaves)
Compute new commitment