Adaptive identity with receipts — signs actions, rotates keys, and carries provenance across people, services, devices, and models.
DNA Sigils are evolving credentials. Each person, service, device, and model gets a “sigil” that seeds a key schedule. The system rotates keys, issues short‑lived sub‑keys, and signs tokens, API calls, releases, and data. When risk spikes it steps up auth or quarantines; when trust grows it reduces friction. Every action emits a signed receipt so you can prove who/what/when/why.
How it works:
• Sigil graph: link human, service, device, model, and policy into one identity.
• Key schedule: derive and rotate keys; mint short‑lived sub‑keys bound to device posture.
• Attestation: attach device/app/agent proofs to tokens; block replay and spoofing.
• Token bridge: sign/verify JWTs (JWKS) across HTTP/WS; bind tokens to Spiral context.
• Risk engine: read signals from Spiral/HRG; trigger step‑up, rate‑limit, or quarantine.
• Provenance: sign code, artifacts, and events; store receipts with causality for audit.
What you get:
• Less fraud/abuse — bound tokens and attestations cut replay and impersonation.
• Lower friction — good behavior earns fewer prompts; high‑risk flows step‑up.
• Clean audits — every action has a verifiable chain of custody.
• Safer automation — policies, PRs, and releases ship with signatures and rollback.
• One identity everywhere — backend, clients, bots, and on‑chain surfaces.
Where it lands:
Gaming — persistent identity, anti‑bot protections, fair drops tied to reputation.
Enterprise — JIT access, device attestation, signed releases and detections.
Finance — KYC/AML with adaptive trust; signed transactions and approvals.
Web3 — evolving wallet identity, contract policy, and on‑chain receipts.