Identity layer
Capture happens on your device
The VEID mobile wallet (reference implementation: mobile/veid-capture-app/ in the protocol repo) captures identity evidence entirely on-device: documents with OCR, a selfie with active liveness challenges that defeat photos, replays, and injection attacks, and biometric hardware attestation — fingerprint or iris — bound to trusted hardware.
Device integrity attestation (Play Integrity on Android, App Attest on iOS) proves the capture ran on a genuine, unmodified device and client. The evidence is sealed into encrypted identity scopes before anything leaves the phone.
Identity layer
Only approved clients may submit
Identity submissions are accepted only from client interfaces on the governance-controlled approved-client list (x/config), and must be signed by both the client and the user. Validators verify both signatures before scoring anything — the capture software's integrity is a governed trust decision, not an assumption.
Identity layer
Validators score by consensus
Encrypted scopes are sealed to validator recipients via x/encryption. Validators decrypt with their keys, evaluate the evidence with shared machine-learning models, and commit an identity trust score to the ledger by consensus. This validator-run identity verification network is the method protected by patent AU2024203136B2; compensation is governed by the conservative incentive policy, not a fixed VEID pool.
Raw documents and biometrics never appear on the public ledger: the chain carries ciphertext and committed scores, nothing else.
Identity layer
Zero-knowledge disclosure
Once scored, users prove what matters through the ZK subsystem (x/veid/zk): that a trust score clears a threshold, or that an attribute holds — age range, residency — without revealing the document, the biometric, or the score itself. Counterparties learn exactly the fact they need and nothing more.
Identity layer
Why a marketplace needs this
Marketplace access on VirtEngine is identity-gated in both directions: providers verify tenants before workloads land on their hardware, and tenants verify providers before trusting them with workloads. Reviews bind to real leases between verified counterparties, making reputation farming structurally expensive. Sensitive account operations — recovery above all — layer on-chain MFA (x/mfa) over the identity foundation.
The consumer-facing identity program is presented at identity.org.au; the protocol-side documentation lives at docs.virtengine.com.