Crate auths_id 

auths-id

Identity management and attestation logic for Auths.

This crate provides:

• Identity creation via did:key and did:keri derivation
• Attestation management for device linking
• Git storage for identity and attestation persistence

Architecture

┌─────────────┐     ┌──────────────┐     ┌─────────────┐
│  Identity   │────▶│  Attestation │────▶│ Git Storage │
│ (did:keri)  │     │   (signed)   │     │  (refs/*)   │
└─────────────┘     └──────────────┘     └─────────────┘

Usage

use auths_id::identity::Identity;
use auths_id::attestation::Attestation;

// Create an identity from a public key
let identity = Identity::from_public_key(&pubkey_bytes)?;

// Create an attestation linking a device
let attestation = Attestation::builder()
    .issuer(&identity.did)
    .subject("did:key:z6MkDevice...")
    .capability(Capability::SignCommit)
    .build()?;

Git Storage Layout

Ref	Content
refs/auths/identity	Identity metadata
refs/auths/devices/nodes/<did>	Device attestations
refs/did/keri/<prefix>/kel	KERI Key Event Log
refs/did/keri/<prefix>/receipts/<said>	Witness receipts

Modules

agent_identity

Headless agent identity provisioning API.

attestation

domain

error

freeze

Identity freeze management.

identity

keri

KERI (Key Event Receipt Infrastructure) implementation.

policy

Policy engine for authorization decisions.

ports

Port traits for hexagonal architecture.

storage

trailer

Git trailer parsing and formatting utilities.

trust

Trust resolution implementation for auths-id.

witness

Witness type conversions for git2 integration.

witness_config

Identity-level witness configuration.