Glossary

Bearer presentation : Exact-key presentation without the holder KB-JWT possession relation. Anyone holding bearer evidence may answer an unconsumed challenge.

Challenge : Canonical relying-party request bound into the proof transcript. It includes the selected mode, exact issuer key, audience, purpose, nonce, time window, claim policy, circuit identity, and revocation policy.

Circuit identity : Versioned set of proof parameters and roles accepted by the relying party. A new disclosure shape or trust mode requires a new identity.

Exact key : P-256 issuer public key selected by the relying party from local policy. A proof cannot choose it.

Holder-bound presentation : Exact-key credential relation plus the bounded compact KB-JWT relation and holder-key possession.

Holder : Entity that controls a credential and can present it, directly or through a wallet. The holder is not necessarily the subject identified by the credential.

Revocation-list snapshot : Relying-party-selected four-entry revocation root and public metadata: issuer, epoch, and validity interval.

Presentation verification : VerifyPresentation: relation verification plus typed local policy and replay handling through the application-owned store.

Purpose : Application context separately supplied with audience and canonically bound into the request transcript. It is not an advisory label.

Relation verification : VerifyRelation: cryptographic validity only, without nonce consumption or an application authorization decision.

Replay store : Durable, atomic application-owned state that records successful nonce consumption.

Relying party : Entity that creates the challenge, receives the presentation, checks it against local policy, and relies on the result for its service or authorization decision.

Revocation bridge : Public commitment that binds the separate private revocation proof to the same credential and presentation context.

Witness : Private material used to construct the proof, including credential inputs, holder key material, and private revocation-path data. It is not serialized in the public envelope.

Wallet : Software acting for the holder to manage credential material and construct a presentation. The wallet is not itself assumed to be the credential subject.