DIDs, device keys, zero-knowledge uniqueness proofs, recovery, civic credentials. Implements identity layer of docs/specs/03-technical-architecture.md.
Ed25519 root identity, optional DID document.
Per-device subkeys with revocation.
Anti-sybil without coercive exposure.
Membership, voting eligibility, education badges.
Status: scaffold · port 3003