|
1 | | -# Iron `did:cel` Agents, Services, and Storage on GC |
| 1 | +# Iron `did:cel` Agents, Services, and Storage |
2 | 2 |
|
3 | 3 | An experimental, modular, composable implementation of an Oblivious Witness Service and `did:cel` identifiers managed by Google Cloud KMS. |
4 | 4 |
|
5 | 5 | This repository provides services, agents, and libraries for creating, managing, witnessing, and verifying `did:cel` event logs in a secure and privacy-preserving way. |
6 | 6 |
|
7 | 7 |
|
8 | | -# Oblivious Witness Service |
| 8 | +## Oblivious Witness Service |
9 | 9 |
|
10 | 10 | [Oblivious Witness Service](./witness-service) |
11 | 11 |
|
12 | 12 | Performs oblivious witnessing of event log. Issues signed and timestamped attestations over event log hashes using Google Cloud KMS in a serverless environment. Processes only cryptographic hashes and never accesses event log contents, preserving privacy while producing verifiable VD DI witness proofs. |
13 | 13 |
|
14 | 14 | Can be used independently of the Iron `did:cel` ecosystem. |
15 | 15 |
|
16 | | -# Managed `did:cel` Identifiers |
| 16 | +## Managed `did:cel` Identifiers |
17 | 17 |
|
18 | 18 | A set of services, agents, and libraries that use Google Cloud KMS to create and manage secure `did:cel` identifiers. Components can be used independently or together. |
19 | 19 |
|
20 | 20 | - [Create Service](./create-service) |
21 | 21 | Creates a new `did:cel` bound to Google KMS key. |
| 22 | + |
22 | 23 | - [Heartbeat Agent](./heartbeat-agent) |
23 | 24 | Heartbeat event generator assuring liveness and temporal continuity of an event log. |
| 25 | + |
24 | 26 | - [Identity Agent](./identity-agent) |
25 | 27 | Acts on behalf of a DID controller to prove DID ownership. |
26 | | -- Life-Cycle Listener |
| 28 | + |
| 29 | +- **Life-Cycle Listener** |
27 | 30 | Reflects changes on KMS keys bound to `did:cel` in the event log (TBD). |
28 | | -- Resolver |
| 31 | + |
| 32 | +- **Resolver** |
29 | 33 | Resolves a given `did:cel` and validates its event log to produce the DID document (TBD). |
| 34 | + |
30 | 35 | - [Storage Service](./storage-service) |
31 | 36 | GCS utilized as `CelStorageService`. |
| 37 | + |
32 | 38 | - [Witness Agent](./witness-agent) |
33 | 39 | Coordinates oblivious witnessing of `did:cel` event logs for identifiers managed using Google KMS and GCS. |
| 40 | + |
34 | 41 | - [Witness Verifier](./witness-verifier) |
35 | 42 | Simple library for verifying VCDI witness proofs in O(1). |
36 | 43 |
|
|
0 commit comments