Its issuer's Trust Anchor revoked it, so no verifier accepts it. It stays in the passport as a record.
scope
sub
·
ta
chain
nbf–exp
cid
No stamps yet. Visit a stamp desk or join a workshop, show your identity and scan the stamp you are given.
Remove every expired stamp, crew membership, desk and workshop mandate from this browser? They no longer verify.
Open a stamp to read the mandate it is. Anyone can check a stamp; only this device can prove it is yours: Show it, then scan the challenge you are shown and sign it.
Collect a stamp or crew membership
Show your identity to the stamp desk or workshop, or to the assembly adding you to its crew.
Someone is checking your stamp or crew membership. Let them scan it, then scan the challenge they show you and sign it here: nothing secret leaves this device.
Present my mandate
You are the holder. Keep your key and passphrase on this device. The person verifying you scans and verifies on their separate device.
1. Show your mandate
No mandates for your keys are stored here. Add your mandate on Mandates first.
No stamps for your identities are stored here. Collect one under My passport first.
2. Scan their challenge
A signature proves possession of the mandate’s key. Confirm who is asking and what they intend to verify before signing; a live challenge can be relayed.
Receive a challenge file or text instead
Review before signing
This device signs for the mandate you chose, decoded here. The requesting verifier checks its authority.
Scope
Trust Anchor
Mandate CID
Signing key
The verifier’s screen counts down its challenge: sign before it runs out, or ask for a new one.
3. Show your response
Have the verifier scan this QR code on their device. They check it against their original challenge.
Return a signature file or text instead
Scan
Check someone's stamp or crew
Scan the stamp or crew membership they show you. It is checked and they are challenged at once: they scan your challenge, sign it on their device and show you their response. A copied QR code alone cannot answer.
Verify a mandate
Check anyone's mandate with a Trust Anchor's verifier, then have its holder prove they hold the key it delegates to: in this browser when it holds that key, or on their own device by QR code. Nothing here signs anyone in.
Check a stamp or crew membership with a verifier, and have its holder prove they hold the identity it was given to, on their own device by QR code. Nothing here signs anyone in.
1. Choose the mandate
Mandate from this browser
Scanning checks it and challenges its holder straight away. Have them ready to scan back: the challenge lasts seconds, not minutes.
2. Prove possession of the key
Challenge expires in s
Expired — challenge the holder again.
Have the holder scan your challenge under Present my mandate, review and sign there, then scan their response. Your verifier checks it against the challenge retained here.
Have both devices ready before requesting a challenge: it lasts at most a minute.
Exchange files, text or a terminal command instead
Or the holder runs
Problems
Response detail
Give stamps
Stamp desk
You hold a desk mandate, so you can stamp passports. Scan the visitor's identity, check the stamp and sign it, then show it back for them to scan.
You run a workshop, so you can stamp its participants' passports. Scan the participant's identity, check the stamp and sign it, then show it back for them to scan.
You hold an assembly's mandate, so you can assign its stamp desks, add its crew and give its workshops. Scan the member's identity, check what you give them and sign it, then show it back for them to scan.
This browser holds no stamp desk or workshop. A desk is a mandate ending in , and a workshop one ending in , delegated to one of your identities by the assembly. Add it under My passport.
Your assemblies
review
Scan the desk member
Sign the desk
Show it back
Ask the desk member for Show my identity under My passport, and scan it. Scan your own to run a desk yourself.
Paste their public identity instead
Desk
For identity
Valid
Signed by
The desk stamps passports in your assembly's name until it ends. Check the fingerprint with the desk member if anyone else could have shown you an identity.
Desk signed. Show it to the desk member: they scan it under Collect a stamp on My passport, and Give stamps lists it.
The code carries the whole chain, so the desk's stamps verify even where its mandate is not published.
review
Name and scan the member
Sign the membership
Show it back
Then ask the member for Show my identity under My passport, and scan it. Scan your own to join the crew yourself.
Paste their public identity instead
Membership
For identity
Valid
Signed by
It shows they are crew of your assembly, under that name, until it ends. It gives no stamps. Check the fingerprint with the member if anyone else could have shown you an identity.
Membership signed. Show it to the member: they scan it with Scan, or under Collect a stamp or crew membership on My passport, and find it under Crew of.
The code carries the whole chain, so the membership verifies even where your assembly's mandate is not published.
review
Title it and scan its host
Sign the workshop
Show it back
Then ask whoever runs it for Show my identity under My passport, and scan it. Scan your own to run it yourself.
Paste their public identity instead
Workshop
For identity
Valid
Signed by
Its host stamps participants in your assembly's name until it ends: those stamps, and nothing else. Check the fingerprint with them if anyone else could have shown you an identity.
Workshop signed. Show it to its host: they scan it with Scan, or under Collect a stamp or crew membership on My passport, and Give stamps lists it.
The code carries the whole chain, so its stamps verify even where your assembly's mandate is not published.
Your workshops
review
Scan the visitor
Ink the stamp
Show it back
Ask the visitor for Show my identity under My passport, and scan it.
Paste their public identity instead
Stamp
For identity
Valid
Signed by
Check the fingerprint with the visitor if anyone else could have shown you an identity.
Stamp signed. Show it to the visitor: they scan it with Scan, or under Collect a stamp.
The code carries the whole chain, so the stamp verifies even where the mandate it came from is not published.
Desks stamp this identity, and only this device can prove it is yours. It needs no name or account. Save its backup file: if you lose the backup file and its passphrase, you lose every stamp it proves. Its public identity is safe to share: a desk that cannot scan your code can stamp it from that text.
not backed upbacked up
The passport shares this browser's wallet with the NOMOS dashboard on this appliance. It lists only passport mandates; anything else stays in the wallet, unlisted here.