SelectiveProof Gateway Provas de Atributos sem Exposição Integral

O que está incluído

• Use case, verifier, decision boundary and prohibited secondary use
• Claim definition age-over-threshold, jurisdiction membership, accreditation, account status, balance range or configured predicate
• Claim semantics, units, reference time and authority
• No medical diagnosis/eligibility or financial suitability decision generated
• Source attribute schema and issuer authority reference
• Credential format/signature suite/version and holder binding
• Issuer registry key, status, validity and rotation
• Gateway does not assert source fact truth beyond verified issuer signature/status
• Disclosure baseline reveal full, selective claim or zero-knowledge predicate
• Minimization comparison documents why each disclosed field is necessary
• Proof template/circuit stable ID, source, compiler/toolchain and artifact hashes
• Public/private inputs and constraint explanation
• Range/set/membership/non-revocation/time predicates as explicitly scoped
• Circuit setup trusted/universal/transparent model and ceremony evidence
• Toxic-waste handling when applicable remains specialist/audit scope
• Independent circuit/security review reference
• No claim of zero knowledge/security without named construction and review
• Test vectors positive, boundary, negative, malformed and adversarial
• Constraint completeness tests detect under-constrained witness
• Overflow/field/range/encoding protections
• Domain separator, verifier ID, purpose and nonce/challenge
• Freshness window and replay prevention
• Holder request shows verifier, purpose, claims, disclosures and expiry
• Consent event is explicit and revocable for future presentations
• No dark pattern bundling unnecessary claims
• Wallet/credential-store integration; private source remains holder/approved prover boundary
• Remote prover only under approved encrypted/minimized design
• Witness/credential/private input not logged
• Proof generation job status and safe failure
• Presentation contains proof, public inputs, circuit/policy version and challenge
• Verifier checks artifact, inputs, domain, challenge, validity and issuer status
• Decision system receives verified/not-verified/reason category, not hidden attributes
• Verification proves predicate under circuit, not real-world legal entitlement
• Revocation status list/accumulator/root and update cadence
• Proof pins status root/time; stale root policy explicit
• Key/circuit deprecation and migration window
• Linkability analysis across presentations
• Pairwise pseudonym/nullifier only if necessary and disclosed
• No global identifier embedded by default
• Collusion/correlation limitations documented
• Selective disclosure fallback when ZK is disproportionate
• Accessibility and recovery when holder cannot generate proof
• Manual alternative path avoids exclusion
• Verification receipt minimal, retention and deletion
• No raw credential retained by verifier baseline
• Metrics generation/verification latency, failures, stale roots and policy mismatch
• Audit claim-policy-circuit-issuer-challenge-proof-verification-decision-reference
• Pilot for four claim types, three issuers and two verifier applications