The Network

How one attestation compounds into trust

AnVerified is not a bigger database of you. It is the opposite: a fact signed once at its source, carried by the person, and released as a scoped yes/no — so the more that is verified, the less is ever held.

The loop, signature by signature

Each step makes the next institution more willing to join — because each step means less personal data that anyone has to keep.

01

A source attests once

The registrar, the ministry, the gatehouse graph or the payroll rail signs a fact about a person one time, where it is actually known. No scan of a transcript, no uploaded payslip — a signature over a claim, minted at the source.

02

The person carries it

The credential lives with the human, not a database — expiring with the eligibility, revocable with a tap. Nothing to breach on a server, nothing to leak, nothing an operator can quietly sell. The wallet is the vault.

03

A relying party asks a question

The bank, the council, the campus merchant or the flash-sale asks a narrow thing — enrolled? employed? eligible? — and receives a signed yes/no scoped to that moment. They learn you qualify. They never learn who you are.

04

Less held compounds trust

Because the party stores nothing about you, its liability shrinks to zero — which is exactly why more sources are willing to attest, and more institutions are willing to rely. That flywheel of nothing-held is the network effect.

Built on four protocol guarantees

The Antrex no-join-key doctrine, expressed as an API: a decision without a dossier, an identifier without a universal key, a signature without a stored record.

Pairwise pseudonyms: every relying party sees a different identifier — there is no universal key to join you across services, and none can be added later.
Yes/no, never who: the protocol releases a decision and an expiry, not a name, an IC number or a history of where you have verified.
The source keeps the record: enrolment stays with the registrar, employment with the ministry. AnVerified moves signatures, never dossiers.
Attenuation, not aggregation: a scope is minted for one purpose (this flash-sale, this waiver) and cannot be replayed for another.

One family, one spine

AnVerified’s first relying parties are its own siblings — the internal network that proves the protocol before external APIs open. Several already have their own homes on the web.

Prove the fact. Hand over nothing else.

AnVerified is in design, built first for the AnTeraju Kampus pilot it exists to serve — its first relying parties are Antrex’s own products. Institutions that must verify a human without holding a dossier can request the protocol today.