infrastructure · current boundary included

A verification plane between evidence and action.

Aadya is designed as infrastructure for services that need a trustworthy answer without collecting an entire identity. It accepts wallet, credential, proof, delegation, or signed operational evidence; applies a bounded policy; and returns a minimised, inspectable decision receipt.

four layers, one bounded decision

The project is the rail, not any one demo.

The public demos are narrow views into the same verification stack. They are kept on separate pages so the infrastructure model remains legible.

01 · protocol edge
Receive standards-shaped evidence. OID4VCI, OID4VP, SD-JWT VC, ISO mdoc, OpenID Federation, and direct signed-evidence adapters meet the service at explicit protocol boundaries.
02 · trust adapters
Resolve who is allowed to assert what. Issuer keys, holder binding, status and revocation, local anchors, EU trusted-list material, and test-ecosystem organizational chains are checked separately from business policy. Technical validation does not manufacture legal or governance status.
03 · decision core
Verify the smallest fact and enforce the boundary. Predicate proofs, nonce and audience binding, replay controls, scoped delegation, spend caps, and action policy produce an accept, deny, or step-up decision with reason codes.
04 · evidence plane
Show how the answer was reached. Signed, minimised receipts and reproducible conformance or formal-verification artifacts make the decision inspectable without turning raw personal or operational inputs into the audit trail.
integration contract

Evidence in. Bounded decision out.

  • request / challengeAsk for one decision-relevant fact, bind it to the relying party, action, nonce, and expiry.
  • presentation / proofReceive the holder-bound credential, private proof, delegation chain, or signed operational batch.
  • policy decisionApply trust, freshness, revocation, replay, disclosure, and action-specific controls fail-closed.
  • signed receiptReturn the verdict, reason codes, commitments, policy version, and verification context—not the full source record.
deployment truth

Reference deployment today. Separated production topology next.

what runs here now

One FastAPI reference deployment.

The public website, canonical demo pages, verification APIs, and several developer surfaces are served by the same application. That makes the evidence clickable and the project easy to inspect. It is a reference topology, not a claim that every surface belongs in one production trust boundary.

Co-located reference system

production target

Separate public, demo, verification, and operator planes.

A hardened deployment should isolate the static public site, disposable demo workloads, customer verification APIs, operator controls, durable signing keys, replay state, and evidence storage. Tenant isolation, rate limits, observability, key rotation, and governed trust-anchor updates belong at those boundaries.

Architecture direction, not deployed claim

see each boundary in isolation

Every demo now has its own page.

Choose the exact verification surface you want to inspect. Each page carries its endpoint, observable outcome, simulated inputs, and explicit limits.