PTI and Verifiable Credentials
Verifiable Credentials (VCs) are cryptographically signed, tamper-evident digital claims — diplomas, licenses, employment attestations, KYC passes — issued by authoritative parties and presented by holders. PTI does not replace VC standards; it provides infrastructure to issue, verify, and compose credentials into context-scoped trust intelligence.
1. What verifiable credentials are
VCs follow W3C and regional profiles (eIDAS 2.0, ISO mobile documents) with:
- Issuer — signs claims about a subject
- Holder — stores and presents credentials in a wallet
- Verifier — validates signature, revocation status, and schema
- Trust registries — issuer accreditation and schema governance
- Selective disclosure — reveal minimum necessary attributes (ZKP extensions)
VCs answer: Is this signed claim valid, current, and from a trusted issuer?
2. What problem verifiable credentials solve
| Problem | VC response |
|---|---|
| Paper credential fraud | Cryptographic integrity |
| Over-disclosure of PII | Selective disclosure |
| Issuer verification | DID / X.509 trust chains |
| Offline verification | Signed payloads without live issuer call |
VCs excel at portable attestations. They do not alone provide continuous behavioral trust, multi-partner signal fusion, or context-scoped scoring engines for lending, rental, and merchant decisions.
3. What PTI adds
Verifiable credentials
- Signed static or semi-static claims
- Holder-presented verification
- Issuer-centric trust chain
PTI adds
- VC as trust evidence — verified credentials become graph edges
- Continuous signals — ongoing events complement point-in-time VCs
- Context-scoped lookup — employment VC weights in
employmentcontext - Institution-scale API — batch lookup without per-holder wallet UX
PTI's Trust Evidence model accommodates verification hooks — VC signature validation results attach provenance to trust outcomes. Verifier institutions may consume credentials through PTI verification APIs rather than bespoke wallet integrations per use case.
4. How they compose together
Integration patterns:
- Verifier-as-producer — institution validates VC, emits
verification.passedtrust event with schema ID and issuer DID. - Wallet-to-lookup — subject presents VC; platform verifies and refreshes trust graph before institution lookup.
- Hybrid — static VC (degree, professional license) plus dynamic signals (payroll events, project completions) in
employmentcontext.
PTI does not mandate a specific VC format — implementations SHOULD profile W3C VC Data Model or regional equivalents in Interoperability bindings.
5. When to use each
| Scenario | Verifiable credentials | PTI |
|---|---|---|
| Prove university degree once | VC ideal | Optional (store verification) |
| Monitor seller trust over 12 months | VC alone insufficient | PTI merchant context |
| Government issues national digital ID VC | VC / eID | PTI as trust exchange layer |
| Institution batch pre-screen 10,000 applicants | Wallet UX heavy | PTI lookup API |
| Cross-border credential recognition | VC standards | PTI federation profiles |
Use VCs for signed attestations; use PTI to operationalize those attestations alongside behavioral trust at institution scale.
6. Related PTI spec/RFC links
- RFC-012 — Trust Evidence
- RFC-006 — Trust Exchange
- Interoperability specification
- RFC-011 — Identity Resolution
- Security specification