{ "vercy": "1.0-draft", "publication": { "status": "research-draft", "adjudicationStatus": "unreviewed", "publishableCanonical": false, "generatedAt": "2026-09-12T08:53:21Z", "providers": [ "Codex" ], "breadth": "recalled by Codex without web access - no source was read", "missingProviders": [], "pass": 2, "cost": { "grok": { "seconds": 25.1, "error": "Reading additional input from stdin...\nOpenAI Codex v0.153.4\n--------\nworkdir: R:\\02_PROJECTS\\02_Meta_Models_Platforms\\Ver.cy\\current\\thing-registry-backlog\nmodel: gpt-6-astra\nprovider: openai\napproval: never\nsandbox: read-only\nreasoning effort: none\nreasoning summaries: none\nsession id: 01a094d1-280b-7f20-af27-67587aeb5b3b\n--------\nuser\nDescribe what is already known about one registered thing. Answer as JSON only, no prose around it.\n\nThing: credential\nSense to describe: (none recorded)\nDomain code: INF.MED\nAlso known as: (none)\n\n\nContext for this batch of 1001 things:\n# Batch 043: 1001 regi", "usd": 0.0, "recall": true }, "codex": { "seconds": 71.8, "error": "Reading additional input from stdin...\nOpenAI Codex v0.153.4\n--------\nworkdir: R:\\02_PROJECTS\\02_Meta_Models_Platforms\\Ver.cy\\current\\thing-registry-backlog\nmodel: gpt-6-astra\nprovider: openai\napproval: never\nsandbox: read-only\nreasoning effort: none\nreasoning summaries: none\nsession id: 01a094d1-27fe-7a32-82d7-94370c8c39de\n--------\nuser\nYou are drafting a Vercy meta-model for one registered thing. Answer as JSON only, no prose around it.\n\nThing: credential\nRegistry id: vr.tr.credential\nPlane / domain: INF / INF.MED\nRegistry definition: (none recorded)\nNames folded into this entry: (none)\n\n\nCo" } }, "enrichment": { "pass": 3, "engine": "claude", "producedAt": "2026-10-06T12:00:00Z", "ingestedAt": "2026-10-06T08:43:50+00:00", "fields": [ "agent_conduct", "ethics", "failure_modes_and_hazards", "owners", "standards_and_regulation" ] }, "gate": { "passed": true, "version": "1.0", "at": "2026-10-07T10:10:26+00:00", "evidence": [ "completeness 1.00", "sense: Wikidata description", "2 live sources", "review by codex: pass" ] } }, "metaModel": { "id": "THING-Q16861606", "registryId": "vr.tr.credential", "name": "credential", "version": "0.1.0-research.1", "entryKind": "thing", "family": "Thing Registry", "domain": [ "INF.MED" ], "status": "research-draft" }, "canonicalUrl": "https://ver.cy/models/thing/q16861606/", "model": { "registry_id": "vr.tr.credential", "name": "credential", "purpose": "Enable an AI agent to recognise a credential, assess the claims and authority it conveys, and determine whether and how it may be presented, checked or relied upon.", "definition": "A credential is a document, record, or other attestation presented as evidence of a subject's identity, qualifications, status, or authority, whose acceptance depends on the verifier's trust in its issuer and assessment of its validity.", "scope_statement": "This model owns a credential as an issued attestation about a subject, including its claims, issuer, representation, verification conditions, lifecycle and permitted uses; whether the registry also includes bare authentication secrets remains unresolved.", "in_scope": [ "Attested identity, qualification, membership, status or entitlement claims", "Issuer identity, issuing authority and grounds for the attestation", "Subject identification and relationships among subject, holder and presenter", "Credential representations, integrity evidence and verification requirements", "Validity, suspension, revocation, replacement and presentation conditions" ], "out_of_scope": [ "The person, organisation or other entity described by the credential", "The underlying education, assessment, employment or membership activity", "Passwords, private keys and other authenticators considered independently", "The relying party's complete access-control or eligibility policy", "General document publishing, copyright and carrier manufacture" ], "distinguishing_features": [ "It presents claims about a subject as an attestation attributable to an issuer, rather than merely describing that subject.", "Its asserted authority and evidentiary basis matter to acceptance; an accurate but unattributed statement is not equivalent.", "Possessing its document or file need not establish that the possessor is its subject or authorised presenter.", "An authentic credential can be expired, revoked, outside its recognised scope or insufficient for a particular decision.", "A credential attesting an entitlement is distinct from the policy or decision that grants access on a particular occasion." ], "characteristics": [ { "name": "Claim class", "kind": "category", "unit_or_values": "Identity, qualification, membership, status, entitlement or explicitly defined other claim", "why_it_matters": "Determines which evidence and interpretation rules a verifier needs." }, { "name": "Attested subject", "kind": "relation", "unit_or_values": "Subject entity or entities, with identification method and ambiguity", "why_it_matters": "Prevents reliance on a credential belonging to a different or unresolved subject." }, { "name": "Issuer and authority basis", "kind": "relation", "unit_or_values": "Issuing entity linked to the mandate, recognition or delegated authority it asserts", "why_it_matters": "Separates attribution of a claim from grounds for trusting it." }, { "name": "Claim scope", "kind": "category", "unit_or_values": "Defined activities, competence levels, jurisdictions, organisations and exclusions", "why_it_matters": "Limits what may reasonably be inferred from the credential." }, { "name": "Holder and presenter binding", "kind": "relation", "unit_or_values": "Subject-held, delegated, bearer-based or unresolved, with supporting evidence", "why_it_matters": "Establishes whether the current presenter may use the credential." }, { "name": "Representation and integrity method", "kind": "category", "unit_or_values": "Paper, physical token, digital record or hybrid; associated seal, signature, registry check or other method", "why_it_matters": "Determines how the attestation can be inspected and alteration detected." }, { "name": "Validity interval", "kind": "measurement", "unit_or_values": "Start and end timestamps with timezone and precision; unspecified or explicitly unbounded where applicable", "why_it_matters": "Constrains when the credential can support a decision." }, { "name": "Lifecycle status", "kind": "state", "unit_or_values": "Issued, active, suspended, revoked, expired, superseded or unknown, with status evidence and observation time", "why_it_matters": "Prevents an old or unavailable status check from being mistaken for current validity." }, { "name": "Verification assessment", "kind": "state", "unit_or_values": "Separate passed, failed, indeterminate or not-applicable results for integrity, issuer authority, subject binding, time and status", "why_it_matters": "Avoids collapsing distinct checks into a misleading single verified flag." }, { "name": "Disclosure and use constraints", "kind": "category", "unit_or_values": "Permitted purposes, audiences, fields, retention conditions and delegation limits", "why_it_matters": "Guides proportionate presentation and handling of credential data." } ], "affordances": [ "Inspect the attested claims and identify the issuer, subject and limits of the attestation.", "Check integrity, issuer authority, subject binding and current status while recording unresolved checks.", "Prepare an authorised presentation containing only claims needed by the relying party.", "Assess whether the credential supports a specified decision under the relying party's acceptance rules.", "Request renewal, correction, replacement or revocation through an authorised issuer process." ], "agent_conduct": { "may": [ "Verify a credential with its issuer or trusted registry, with the holder's consent.", "Store credentials it is entrusted with securely and only as long as needed." ], "must_not": [ "Forge, alter or issue a credential without authority.", "Accept a credential as valid without checking its issuer, status and expiry.", "Share a person's credentials beyond the verification they agreed to.", "Present itself as a holder of credentials it does not have." ], "requires_human": [ "Revoking or refusing a person's credential.", "Disclosing credentials to a third party." ] }, "ethics": { "considerations": [ "Credentials control access to jobs, services and places; false ones endanger others.", "Over-collection of credential data creates privacy and identity theft risks." ], "affected_parties": [ "Credential holders", "Verifiers and the people they protect", "Issuers" ] }, "owners": { "steward": "The issuing authority; the holder keeps and presents it.", "master_systems": [ "Issuers' registers of credentials and revocations" ] }, "failure_modes_and_hazards": [ "Forged or stolen credentials let unqualified people into trusted roles.", "Leaked credential data enables identity fraud." ], "standards_and_regulation": [ "Verifiable Credentials Data Model, World Wide Web Consortium." ], "what_it_is_for": [ "A credential is presented when a person or organization needs to demonstrate identity, qualifications, status or delegated authority.", "Credentials are used in education, employment, professional practice and access decisions, where acceptance depends on the issuer and the claim being verified." ], "facets_not_applicable": { "recognition": "A credential's status as a trusted attestation is not directly perceptible and cannot be established from the appearance of its carrier." } }, "sources": [ { "id": "wikidata", "title": "Wikidata item Q16861606: credential", "url": "https://www.wikidata.org/wiki/Q16861606", "url_status": "live", "what_it_supports": "identity and sense of the item", "checked_by": "wikidata-api" }, { "id": "wikipedia-en", "title": "Wikipedia: Credential", "url": "https://en.wikipedia.org/wiki/Credential", "url_status": "live", "what_it_supports": "general description of the item", "checked_by": "wikidata-api sitelink" } ], "structure": { "bundles": [ { "id": "attested-claims", "name": "Attested claims", "description": "The assertions the credential makes and the boundaries of their meaning.", "rationale": "A credential supports particular claims; its title alone does not establish what its holder knows, is or may do.", "layers": [ { "id": "claim-content", "name": "Claim content", "description": "Identify the attestation and its subject without enlarging its meaning.", "findings": [ { "id": "explicit-attestation", "name": "Explicit attestation", "description": "Record the issuer's actual assertions separately from interpretations made by a verifier.", "questions": [ { "text": "What identity, qualification, membership, status or entitlement does the credential explicitly attest?", "kind": "definition", "id": "explicit-attestation-q01" }, { "text": "Which subject does each claim concern, and what resolves ambiguity in that identification?", "kind": "boundary", "id": "explicit-attestation-q02" } ] } ] }, { "id": "claim-limits", "name": "Claim limits", "description": "Capture conditions and exclusions that constrain the attestation.", "findings": [ { "id": "bounded-meaning", "name": "Bounded meaning", "description": "Distinguish what is certified from broader competence, recognition or permission that might be inferred.", "questions": [ { "text": "Which activities, levels, locations or institutional contexts are covered or excluded?", "kind": "boundary", "id": "bounded-meaning-q01" }, { "text": "Does the credential attest completion, assessed competence or permission to practise, and what evidence establishes that distinction?", "kind": "definition", "id": "bounded-meaning-q02" } ] } ] } ] }, { "id": "issuance-and-authority", "name": "Issuance and authority", "description": "Who makes the attestation, why they may make it and what supported issuance.", "rationale": "Correct attribution does not by itself establish recognised authority or adequate grounds for a claim.", "layers": [ { "id": "issuing-authority", "name": "Issuing authority", "description": "Identify the responsible issuer and the scope of its asserted authority.", "findings": [ { "id": "authority-chain", "name": "Authority chain", "description": "Record any accreditation, mandate or delegation used to justify issuer authority for these claims.", "questions": [ { "text": "Who is responsible for the attestation, and is a separate service merely producing or signing its representation?", "kind": "provenance", "id": "authority-chain-q01" }, { "text": "What evidence supports the issuer's authority for this credential type at the time of issuance?", "kind": "provenance", "id": "authority-chain-q02" } ] } ] }, { "id": "issuance-basis", "name": "Issuance basis", "description": "Connect the issued claims to the process and evidence used to grant them.", "findings": [ { "id": "award-grounds", "name": "Award grounds", "description": "Record issuance criteria, their applicable version and available evidence that they were satisfied.", "questions": [ { "text": "Which assessment, identity check, appointment or other event justified issuing the credential?", "kind": "provenance", "id": "award-grounds-q01" }, { "text": "Which criteria applied, and what evidence is available without exposing unnecessary underlying records?", "kind": "provenance", "id": "award-grounds-q02" } ] } ] } ] }, { "id": "representation-and-binding", "name": "Representation and binding", "description": "How the credential is embodied and connected to its subject and presenter.", "rationale": "Copies, presentations and possession can otherwise be mistaken for distinct attestations or proof of legitimate use.", "layers": [ { "id": "credential-representations", "name": "Credential representations", "description": "Relate documents, records and presentations to the attestation they represent.", "findings": [ { "id": "attestation-identity", "name": "Attestation identity", "description": "Distinguish the credential from a copy, replacement carrier, derived presentation or separately issued attestation.", "questions": [ { "text": "What identifier or issuer record establishes which attestation this representation belongs to?", "kind": "definition", "id": "attestation-identity-q01" }, { "text": "Is this item an original representation, copy, replacement or derived presentation, and which claims does it preserve?", "kind": "boundary", "id": "attestation-identity-q02" } ] } ] }, { "id": "subject-holder-presenter", "name": "Subject, holder and presenter", "description": "Separate the entity described from whoever holds or presents the credential.", "findings": [ { "id": "legitimate-presentation", "name": "Legitimate presentation", "description": "Capture the evidence and rules connecting a presentation to the subject or an authorised representative.", "questions": [ { "text": "How can a verifier establish the presenter's relationship to the attested subject?", "kind": "provenance", "id": "legitimate-presentation-q01" }, { "text": "May an agent, guardian or other delegate present it, and what establishes that authority?", "kind": "action", "id": "legitimate-presentation-q02" } ] } ] } ] }, { "id": "verification-and-lifecycle", "name": "Verification and lifecycle", "description": "Evidence of authenticity and the time-dependent standing of the credential.", "rationale": "An intact representation can remain available after the attestation stops being acceptable.", "layers": [ { "id": "authenticity-checks", "name": "Authenticity checks", "description": "Specify checks appropriate to the credential's medium and issuing system.", "findings": [ { "id": "integrity-and-attribution", "name": "Integrity and attribution", "description": "Keep evidence of unaltered content and issuer attribution distinct from acceptance of the claims.", "questions": [ { "text": "Which signature, seal, issuer lookup or other evidence can establish attribution and detect alteration?", "kind": "provenance", "id": "integrity-and-attribution-q01" }, { "text": "Which checks passed, failed or remain indeterminate, and when were they performed?", "kind": "measurement", "id": "integrity-and-attribution-q02" } ] } ] }, { "id": "temporal-standing", "name": "Temporal standing", "description": "Track validity periods and issuer-controlled changes in standing.", "findings": [ { "id": "current-and-historical-status", "name": "Current and historical status", "description": "Record effective dates and status evidence sufficiently to distinguish present usability from historical attestation.", "questions": [ { "text": "When does validity begin and end, and what suspension, revocation or supersession evidence applies?", "kind": "measurement", "id": "current-and-historical-status-q01" }, { "text": "How should a verifier treat unavailable or stale status evidence and requests to validate a past presentation?", "kind": "action", "id": "current-and-historical-status-q02" } ] } ] } ] }, { "id": "reliance-and-disclosure", "name": "Reliance and disclosure", "description": "Conditions for using a credential in a decision and sharing its claims.", "rationale": "Verification must lead to a bounded decision while respecting the credential subject's disclosure constraints.", "layers": [ { "id": "acceptance-context", "name": "Acceptance context", "description": "Relate the attestation to a specific relying party's requirements.", "findings": [ { "id": "decision-sufficiency", "name": "Decision sufficiency", "description": "Assess whether the credential's claims and authority satisfy the intended decision without treating acceptance as universal.", "questions": [ { "text": "Which relying party, purpose and acceptance rules govern this proposed use?", "kind": "boundary", "id": "decision-sufficiency-q01" }, { "text": "Does the credential satisfy those requirements, or is additional evidence or human review needed?", "kind": "action", "id": "decision-sufficiency-q02" } ] } ] }, { "id": "presentation-controls", "name": "Presentation controls", "description": "Govern which claims may be disclosed and how presentation evidence may be retained.", "findings": [ { "id": "proportionate-disclosure", "name": "Proportionate disclosure", "description": "Record disclosure authority and supported ways to limit unnecessary exposure or reuse.", "questions": [ { "text": "Which claims are necessary for this purpose, and can the representation disclose them without revealing the complete credential?", "kind": "action", "id": "proportionate-disclosure-q01" }, { "text": "What authority permits presentation, and what audience, retention or reuse restrictions apply?", "kind": "action", "id": "proportionate-disclosure-q02" } ] } ] } ] }, { "id": "evidence-and-external-alignment", "name": "Evidence and external alignment", "description": "What the world already says about this thing, gathered so the model can be checked against it.", "rationale": "A model that cannot be lined up against existing standards, identifiers and practice cannot be adopted by anyone who already uses them.", "layers": [ { "id": "reported-evidence", "name": "Reported evidence", "description": "Findings from the breadth pass, kept separate from the structural claims.", "findings": [ { "id": "evidence-confidence-notes", "name": "Check these first", "description": "Recalled without web access and unsourced; every item is a lead to verify.", "evidence": [ "No sense is recorded, so this account treats credential broadly as an evidentiary information artifact; the intended registry sense should be checked.", "Computing usage sometimes calls passwords, keys, or tokens credentials, while technical standards may distinguish credentials from authenticators.", "Standards are named from recall without source inspection; their applicable editions and precise scope require verification." ], "questions": [ { "id": "evidence-confidence-notes-q01", "text": "Which of these check these first hold for the sense of credential this model covers, and on what evidence?", "kind": "provenance" } ] }, { "id": "evidence-kinds", "name": "Kinds and varieties", "description": "Recalled without web access and unsourced; every item is a lead to verify.", "evidence": [ "Identity credentials", "Academic credentials", "Professional certifications", "Occupational licences", "Access and authentication credentials", "Diplomatic credentials" ], "questions": [ { "id": "evidence-kinds-q01", "text": "Which of these kinds and varieties hold for the sense of credential this model covers, and on what evidence?", "kind": "provenance" } ] }, { "id": "evidence-identifiers", "name": "Identifiers and schemes", "description": "Recalled without web access and unsourced; every item is a lead to verify.", "evidence": [ { "scheme": "Issuer-assigned credential identifier", "value_or_pattern": "Certificate, licence, or document number in an issuer-defined format", "note": "Usually identifies a credential within the issuer's records; there is no universal numbering scheme for credentials." }, { "scheme": "X.509 certificate serial number", "value_or_pattern": "Integer assigned by the issuing certification authority", "note": "Applies to public-key certificates; the issuer and serial number together distinguish a certificate." } ], "questions": [ { "id": "evidence-identifiers-q01", "text": "Which of these identifiers and schemes hold for the sense of credential this model covers, and on what evidence?", "kind": "provenance" } ] }, { "id": "evidence-standards-and-regulation", "name": "Standards and regulation", "description": "Recalled without web access and unsourced; every item is a lead to verify.", "evidence": [ "W3C Verifiable Credentials Data Model - World Wide Web Consortium; a data model for expressing verifiable credentials and presentations.", "Open Badges - 1EdTech Consortium; a specification for portable digital achievement credentials.", "ITU-T X.509 - International Telecommunication Union; a framework covering public-key and attribute certificates.", "ISO/IEC 17024 - International Organization for Standardization and International Electrotechnical Commission; requirements for bodies operating certification of persons." ], "questions": [ { "id": "evidence-standards-and-regulation-q01", "text": "Which of these standards and regulation hold for the sense of credential this model covers, and on what evidence?", "kind": "provenance" } ] }, { "id": "evidence-real-world-use", "name": "Real-world use", "description": "Recalled without web access and unsourced; every item is a lead to verify.", "evidence": [ "Demonstrating qualifications during recruitment or admission.", "Establishing identity when accessing services.", "Demonstrating permission to practise a regulated occupation.", "Authenticating a user, device, or service to a computer system.", "Documenting delegated authority or official representative status." ], "questions": [ { "id": "evidence-real-world-use-q01", "text": "Which of these real-world use hold for the sense of credential this model covers, and on what evidence?", "kind": "provenance" } ] }, { "id": "evidence-failure-modes-and-hazards", "name": "Failure modes and hazards", "description": "Recalled without web access and unsourced; every item is a lead to verify.", "evidence": [ "Forgery or alteration of credential contents.", "Use of a stolen or copied credential by someone other than its legitimate subject or holder.", "Acceptance of an expired, revoked, or superseded credential.", "Treating a valid signature or authentic document as proof that every underlying claim is true.", "Unnecessary disclosure of personal information or correlation of a holder's activities across verifiers." ], "questions": [ { "id": "evidence-failure-modes-and-hazards-q01", "text": "Which of these failure modes and hazards hold for the sense of credential this model covers, and on what evidence?", "kind": "provenance" } ] }, { "id": "evidence-regional-variation", "name": "Regional variation", "description": "Recalled without web access and unsourced; every item is a lead to verify.", "evidence": [ "Recognition of academic and professional credentials depends on jurisdiction, institution, and recognition agreements.", "Occupational licensing requirements and the authority of issuing bodies vary by jurisdiction.", "Accepted identity documents and requirements for electronic credentials vary across jurisdictions and services." ], "questions": [ { "id": "evidence-regional-variation-q01", "text": "Which of these regional variation hold for the sense of credential this model covers, and on what evidence?", "kind": "provenance" } ] }, { "id": "evidence-neighbours", "name": "Neighbouring kinds and how to tell them apart", "description": "Recalled without web access and unsourced; every item is a lead to verify.", "evidence": [ { "name": "Qualification", "difference": "A qualification is an attained competence or formally recognized achievement; a credential supplies evidence of it." }, { "name": "Identifier", "difference": "An identifier distinguishes a subject or record; by itself it does not attest to identity, qualification, or authority." }, { "name": "Authenticator", "difference": "An authenticator is something controlled or possessed to demonstrate identity during authentication; a credential can bind an identity to that authenticator." }, { "name": "Authorization", "difference": "Authorization grants or determines permission; a credential may provide evidence used in that decision." }, { "name": "Certificate", "difference": "A certificate is a particular form of formal attestation; credentials also include other documents, records, and authentication-related forms." } ], "questions": [ { "id": "evidence-neighbours-q01", "text": "Which of these neighbouring kinds and how to tell them apart hold for the sense of credential this model covers, and on what evidence?", "kind": "provenance" } ] } ] } ] } ] }, "openQuestions": [ "Does vr.tr.credential include passwords and other authentication secrets, or only issued attestations?", "Does an existing Vercy world model already own this concept or a substantial part of its scope?", "Which credential families must be covered, particularly self-issued attestations, bearer credentials and attestations about nonhuman subjects?", "When do renewal, correction and replacement create a new credential rather than a new representation of the same attestation?", "Which authoritative sources establish recognition, status and historical verification rules for the credential families selected?" ], "statistics": { "bundles": 6, "layers": 11, "findings": 18, "questions": 28 } }