The DID Router resolves Sovereign DIDs locally — no DNS, no blockchain call, no HTTPS lookup. Each DID maps to a public key and policy table. Resolution works offline. Multiple DID methods supported: sovereign:, key:, web: (local only).
The identity chain links each authentication event with a hash-chain. Every login, token issuance, and revocation is an immutable entry. The chain can be verified end-to-end, exported, and replayed.
For IAM systems, Shamir 3-of-5 means no single administrator or HSM vendor can unilaterally recover the master key. Three of five custodians (e.g. CISO + two VPs) must cooperate. Eliminates single points of failure that regulators flag as risks.
TruthRank assigns a reputation score to each DID based on verified actions, peer attestations, and historical behavior. Unlike centralized reputation, each score update is hash-committed — tamper-evident. Badges are non-transferable and decay on inactivity.