לאנשים
התשובה קטנה מן השאלה.
צילמת את הדרכון שלך שוב החודש. מישהו היה צריך לדעת עליך דבר אחד. עכשיו מוחזקים אצלו השם שלך, הפנים שלך, הכתובת שלך ותאריך הלידה שלך, לנצח, על שרת שלעולם לא תהיה לך אליו גישה. הם רצו תשובה אחת: כן.
כדאי לקרוא את זה קודם, כי זה משנה את כל מה שבא אחריו. אין היום אפליקציית ORBIS שאפשר להתקין. הדף הזה מתאר תכנון שרץ בחלקו, לא משהו שאפשר להוריד היום אחר הצהריים. עדיף שהדף ייסגר מאשר שיישאר ממנו רושם אחר.
הדף הזה מתורגם רק בחלקו. הניווט, הכותרת, התקציר וכל הגילויים שלמעלה מתורגמים. המקטעים הארוכים שלמטה עודם באנגלית, ואינם מתורגמים אוטומטית ברקע: זהו הטקסט המקורי עצמו ולא ניחוש שלו. קריאת הדף כולו באנגלית.
Prove the fact. Keep everything else.
A shop asking your age gets a yes. Not a birth date it can keep, sell, or lose.
Your phone answers the question that was asked. It signs that answer, so the shop can check it is genuine. The shop never contacts us to do that. Your address was not withheld from them. It was never sent.
One row travels. Four stay. That is the whole idea, and everything below is a consequence of it.
What changes for you
01
Nobody accumulates you
The shop gets the answer, not the document. There is no copy of your passport on their server waiting to leak in two years.
02
We cannot watch you
Checking your answer means reading a public key from a public address. We are not in the loop. No record of where you proved what exists on our side.
03
The keys are yours
The design is that your phone makes its own keys inside its secure chip. Custody is an operation we cannot perform, not a promise we make.
04
Cancelling is public
When a proof is cancelled it stops working everywhere. The list that says so is public and signed, so you can check your own standing exactly as a shop would.
What is real today, and what is not
Being straight with you about this is the product. So here it is without softening.
LIVE Working now
- The public key a shop would check is published and readable by anyone. Open it yourself: /.well-known/did.json.
- The sign-in ceremony is real. A browser shows a code, your phone approves it, and the session knows you by a key fingerprint rather than an email address.
- The cancellation list is published and signed, so "is this still valid" has a public answer.
NOT YET Not working
- There is no app. You cannot hold a proof in your phone yet. This is the biggest missing piece. Everything else here waits behind it.
- Nothing is sent to you. Email and text messages do not send from this system today.
- You cannot yet let people find you. That will be something you switch on, and never a default.
When the app ships, this page changes on the same day, and the register changes state with it.
If you are here for someone else
02
If you are a developer
Five endpoints you can curl before you finish this sentence. No key, no signup, no sales call.
03If you are buying this
What it conforms to, what it does not, and who is accountable — with an endpoint against every row.
04If you want to issue
The four partner roles, what each one runs, and what happens when something goes wrong.
Ask this site
This is a search, not a language model. There is no AI on this cell: nothing here is generated, your question never leaves your browser, and no request is made when you ask. It searches this site’s own 27 pages and nothing else. You can open and read the whole list below: what this search can see is exactly what you can see. When nothing answers, it says so rather than writing something that sounds like an answer.
Try:
- IssuerSigns a claim about you. Learns nothing afterwards.
- Holder — youKeeps it. Chooses what to show, and to whom.
- VerifierChecks the signature and the status. Does not call the issuer.
The arrow that is missing is the one that matters: there is none from the verifier back to the issuer, which is why the issuer cannot see where you went.
- Read the token and the key it names.
- Resolve the issuer’s key document.
- Recompute that key’s thumbprint and compare it to the name in the token.
- Verify the signature, using the algorithm the token itself declares.
Every step is arithmetic the receiving party performs. None of it asks the issuer to vouch for the issuer.
ExampleA credential with four claims, of which two are sent:
| Claim | Value | Sent? |
|---|---|---|
| given_name | Ada | sent |
| date_of_birth | 1970-01-01 | withheld |
| over_18 | true | sent |
| address | … | withheld |
The issuer’s signature still verifies over the two that were sent, because the two that were not are committed to as salted digests rather than as values.
Everything this search can see — all 27 pages, and what each one claims
- ORBIS.IDYour identity belongs to you. Right now, it belongs to everyone else.Every time you sign up for something, you hand over a copy of yourself — a photo of your passport, a scan of your face, your date of birth. Those copies pile upSections: The grievance, the Article, and the proof · The problem, in one sentence you already know · Five promises — and what each one actually means · Three people, one seal, no copies · The screen where you decide · What we can see, and what we cannot
- Declaration of Digital IndependenceUniversal Declaration of Digital Independence and Human Digital RightsThe founding document of this estate, written by Jonatan Schmidt and published here unedited. Next to each Article is what the running system actually does abouSections: Universal Grievances Against Digital Oppression · Universal Principles of Digital Sovereignty · A Universal Call to Unified Action · In Witness Whereof · The honest case against this whole idea
- The Trust FabricTrust, woven in.The trust fabric for the real economy — it turns everyday life into proof you own . An issuer signs a statement, a holder keeps it and decides who sees it, and Sections: Split trust into three roles — never merge them. · A bill becomes proof. Proof becomes credit. · Honesty is the architecture. · The fabric cannot be retrofitted. · Three converging markets — one regulatory clock. · The lines the product already says for itself.
- Demo consoleThe only demo here is the real thing.There is no recorded walkthrough on this page, no simulated data and no screenshot of a product. There is a running trust plane and the commands that talk to itSections: 01 · The trust anchor · 02 · What this issuer issues · 03 · Is it healthy right now · 04 · Revocation, signed · 05 · Prove it against the published conformance vectors · Two lists, same page, same weight
- DocumentationGenerated from the route table, so it cannot drift.The wire contract is derived from the live routing table on every request. The document and the server cannot disagree, because one is made out of the other.Sections: Start here · The full contract
- DevelopersEverything below is a live response.Not documentation of an intended one. Five commands, no account, no API key, no sales call. Run them before you decide whether to keep reading.Sections: 01 · The trust anchor · 02 · Issuer metadata · 03 · The credential shape · 04 · Conformance vectors — check your implementation, not ours · 05 · Revocation, signed · Readiness that reports the hardware
- CapabilitiesEvery claim, its real state, and the proof.25 entries: 14 live · 1 partial · 1 planned · 9 not yet. Each one was checked against the cell serving this page. Almost nobody in this industry publishes the rSections: What the four words mean · Identity · Issuance · Operations · Verification · Standards
- StandardsOne row per standard. Including the ones we fail.5 live · 4 partial · 0 planned · 3 not yet. Every row states what the standard demands , what this cell actually does, and the artefact that settles it. Two rowSections: What the four words mean · Credential formats, as their own register · Why every row carries a state
- RegulationsThe posture, in the same discipline.Conformant where it is true, planned where it is not yet, and never silent about the difference. Data minimisation here is a property of the credential format, Sections: Data minimisation, enforced by cryptography · What the four words mean · Compliance and security capabilities · Security · Compliance · Certification status, stated once and plainly
- For peopleThe answer is smaller than the question.You photographed your passport again this month. Someone needed to know one thing about you. They now hold your name, your face, your address and your date of bSections: Prove the fact. Keep everything else. · What changes for you · What is real today, and what is not · If you are here for someone else
- For businessYour own issuer. Your own domain.You mint your own credential types under your own domain. Your members hold them. Your counterparties check them offline, against a public key, with nothing to Sections: You are not early. The deadlines already exist. · The live example is not a mock · What a buyer actually asks · Two lists, same page, same weight · Getting started
- For citiesA city is a tenant, with its own key.Resident credentials a city issues under its own did:web , checked by services across the city with no shared resident database in the middle — because the checSections: Why the architecture is not city-specific · What a city actually gets from this · Two lists, same page, same weight
- For governmentTwo questions, both answered with endpoints.What does it conform to, and what is provable without taking our word for it. Everything below links the artefact that settles it — a document you fetch, a fileSections: The property that comes before everything else · Conformance, one row per standard · Accountability · Two lists, same page, same weight
- PartnersFour roles, and what each one runs.Issuer partners mint their own types under their own tenant. Relying parties verify against the trust anchor. Wallet partners hold on a person's behalf. Data paSections: A page each, with its own evidence · How intake works, and what it costs you · Two lists, same page, same weight
- Apply as a partnerApply, and here is exactly what happens next.The intake is a public, rate-limited endpoint you can call right now. What happens after it is a person, not a pipeline, and this page says which steps are whicSections: Step 1 · Call the intake · Do it here · What each step actually is · What we do with what you send
- Application statusWhere your application is, without asking us.A public endpoint answers with the state of an application you hold the id for. No account, no sign-in, no email thread.Sections: Ask it directly · Check it here · What the states mean
- Issuer partnersYour own key, your own domain, your own exit.An issuer partner runs a tenant with its own did:web , its own signing key, its own status list and its own credential types. The credentials you mint are verifSections: What you actually get, and you can look at all of it now · The formats, as a register · The exit, stated before you sign anything · Two lists, same page, same weight
- Relying-party partnersVerification takes no key. Count the routes.There is nothing to buy and nothing to sign up for on the verifying side. The verification plane takes no authentication at all, and that is a structural properSections: Count it yourself · What you integrate: three fetches · Test your verifier against ours, offline · What is not proved yet, on the record
- Wallet partnersWhat a wallet has to speak to interoperate.The protocols, the format, and the key custody we expect. And the thing no other page in this industry will tell you: nothing has ever completed this flow againSections: The discovery surface, live now · What we expect of you, and what you can expect of us · Aligned with HAIP 1.0
- Data partnersA signed contract, an audit chain, and a short list.A data partner exchanges verified attributes under a signed agreement, with every exchange recorded in a tamper-evident chain. It is also the least built of theSections: What is real underneath · Compliance · What a data partner would get and give · If you want to be first
- Verify with ORBISThe plane designed to survive everything else being down.Verification needs no signing key, no issuer identity and no vault — a cell can be configured for verification alone. It also needs no permission: 107 of this cSections: Three fetches, no account · The honest line between implemented and witnessed · Two lists, same page, same weight
- The clock — the deadlines, counted liveEvery date on this page was set by a parliament, not by us.This is not a roadmap. It is a list of legal instruments with dates attached, and the first one has already gone. Nothing below is written down and left to rot:Sections: The instruments, in the order they bite · Switzerland, and what it actually tells you · What “certified” currently means in this field · To a government reading this · To the people building the same thing · To the person these deadlines are actually about
- How ORBIS compares — and where it loses6 axes. 2 no established vendor holds. 3 we do not hold ourselves.Dozens of vendors sell pieces of this. The founding brief compared fourteen of them across six capabilities and concluded that no competitor held more than threSections: The matrix · Every axis, and how to check it · The discovery probe · What can be proved right now · What we withdrew · The honest gaps
- Your accountAn account with no password to steal.Not a row in our database with your email on it. An ORBIS.ID account is a key , and the half that matters is designed to be born on your own device and never seSections: What an account actually is · How you get one · What the account can do · How to leave with everything · If you are not here as a person
- For your organizationYour own issuer identity — and your own way out.An organization on ORBIS is not an account on our platform. It is a tenant with its own web identity, its own signing key, its own revocation list and its own cSections: What your organization becomes · What onboarding actually involves · What it does not require · Three pages, one for each question · The other two doors
- The operator back officeThe operator console, and the door that will not open yet.Sections: What the back office does · The door, and why it is shut · How an operator signs in · Count it yourself · The other two doors
- Network operations centreEvery panel on this page is a reading your own browser just took.The trust chain resolved live, the revocation field decoded from the signed list, the audit hash chain recomputed link by link, and this cell’s latency measuredSections: The chain that draws itself as it proves itself. · Tamper-evident, and you are welcome to try. · The finding this page would rather report than hide. · What an operator commands, counted from the wire. · Stated here rather than found later.
This page is written without protocol vocabulary on purpose, so the glossary of technical terms is not opened on it. The search above still finds the page that answers you. The words themselves are defined on every other page, and explained at /standards.