Identity systems, recognition, inclusion and the allocation of rights through digital credentials.
A public trust mark is recognition infrastructure whose legitimacy depends on the independence, revocability, and contestability of the accreditation and certification chain behind it.
An agent ID can make identity, provenance, and permission legible to a service, but it becomes governance infrastructure only when the authority behind those claims can be scoped, refreshed, revoked, contested, and independently trusted.
Split-knowledge identity can make an agent traceable without making its principal visible to business actors, but traceability becomes legitimate accountability only when tracing, revocation, delegated authority, and redress are independently governable.
Cross-border digital identity interoperability fails when states can issue credentials but cannot export trust. The paper's central contribution is to relocate the binding constraint from protocols and enrollment infrastructure to assurance grammar, accreditation authority, trusted lists, and institutional capacity.
The paper frames self-sovereign identity as a strategic shift from institutional data accumulation to holder-mediated verification, but its governance model still depends on future trust registries, legal recognition, sectoral mandates, revocation controls, and redress institutions that are not yet operationalized.
The paper usefully formalizes privacy-preserving proof of personhood as a cryptographic problem, but its real governance challenge lies upstream of the proofs: who is allowed to issue personhood, what social relationships count, and how those judgments are revoked, contested, and made legible across institutions.
Digital identity succeeds not when a credential exists, but when governance, interoperability, trust, and everyday service relevance are engineered together as public infrastructure.