AnVerified: prove the fact, not the person
One verification at the source that knows the truth — student, servant, worker, resident — reused everywhere it is needed as a signed, expiring, revocable yes/no. The no-join-key doctrine, made sellable.
Verify once · Apply everywhereEvery institution needs a fact about you. None of them need you.
“Are you a student?” should be answerable by a registrar’s signature, not by your transcript, your IC or your life. AnVerified turns institutional facts into expiring, revocable, pairwise-pseudonymous tokens — the spine every Antrex solution group already stands on.
A credential, read as a dossier
The lifecycle of one verification — issued, asked, isolated, owned, and reachable without a record — rendered as honest design mockups, because AnVerified is still in design.
Four families of attested fact
Each issued at the source that knows it, each consumable as a yes/no, none of them movable between relying parties.
Enrolled student · staff · civil servant
Issued once at the source that actually knows — registrar, ministry HR, campus SSO — and re-checked silently each year. i-Saves passes, AnTeraju Kampus records and AnKantin lunch accounts all hang off this one credential.
Employed · income band · gig-active
Employment and income facts attested from the ledger or payroll rail as range-claims, never payslips. PERKESO-scheme eligibility, AnKedai financing referral and takaful underwriting read the band, not the person.
Resident of a place · member of a group
Council, community and estate membership attested by AnKampung's gatehouse graph or a majlis roster — the credential that makes civic feeds consent-local and hazard alerts addressable without an address book.
Eligible for a benefit · aid · zakat class
Scheme eligibility resolved to a token at the point of need — aid distribution, segment pricing, waiver queues — with the qualifying detail staying in the issuing authority's vault.
{
"credential_id": "avf_9f2c…", // rotating, pairwise-per-relying-party
"claim": "enrolled_student",
"status": "true",
"confidence": "verified_at_source", // registrar SSO attestation
"scope": "i-saves:flash_students_nov",
"expires": "next_enrolment_check",
"name": null, "ic": null, "history": null
}The doctrine, in the mathematics
Masrif’s two-ledger architecture already promises that its deen and dana ledgers share no join key. AnVerified takes that private design and publishes it as a public protocol: the partition is the product. An identity service that can’t join you across services isn’t safer because of a contract — it’s safer because the mathematics has no handle.
- Yes/no, never whoThe relying party receives a decision, not a dossier. Merchants, councils and platforms learn that you qualify — never your name, ID or behaviour.
- Pairwise pseudonymsEvery relying party sees a different credential identifier. There is no universal key to join you across services — the no-join-key doctrine, in the protocol itself, not in a policy PDF.
- Revocable and expiringCredentials die with eligibility — graduation, job change, moving out — and every one carries a one-tap revoke the human owns. A verification you cannot delete is surveillance with better branding.
These describe the protocol’s guarantees and the fact families it spans — not adoption. AnVerified is in design, built first against Antrex’s own relying parties; no verification counts or partners are claimed here.
Sold to whoever must verify a human
The per-ministry doctrine applies here too: every tenant isolated, no cross-institution join exists — not as policy, as protocol.
Banks & takaful operators
Onboarding and affordability checks against attested, source-verified claims — shorter forms, fewer disputes, PDPA-clean.
Ministries & agencies
Scheme eligibility at the point of need (aid, waivers, quotas) per ministry — each tenant isolated, no cross-agency join exists to buy.
Universities & employers
Enrolment and employment attestation once, reused everywhere the person is entitled — the spine of the AnTeraju Kampus and AnKerja stories.
Marketplaces & property
AnBilik tenancy trust, AnKedai counterparty checks, hire-rent deposits — verified posture, not scraped reputation.
A verification you cannot delete is surveillance
Every credential carries an expiry tied to the eligibility that issued it and a one-tap revoke the human owns. The relying party keeps nothing to breach, the issuer keeps the record it already had, and AnVerified keeps a signature — not a person. That is the whole promise, and it is enforced by the protocol rather than by a privacy policy that can be rewritten.
Questions, answered
No — it sits downstream of them. Government identity documents prove legal identity; AnVerified turns institutional facts (enrolled, employed, eligible, resident) into privacy-preserving, machine-checkable claims. Where a national rail exists, we integrate as a relying party; we never duplicate the registry.
Prove the fact. Hand over nothing else.
AnVerified is in design, built first for the AnTeraju Kampus pilot it exists to serve — its first relying parties are Antrex’s own products. Institutions that must verify a human without holding a dossier can request the protocol today.