Trust model

Ensan ID uses a binding-level trust model.

The product does not claim that a person is legally verified. It records and displays which public identity bindings have been verified and which claims remain self-declared.

Trust levels

Self-asserted

A resolver exists and the holder has published declarations. No external public binding has been verified.

Verifier interpretation: useful as a declaration, not as account-control evidence.

Account-control verified

At least one public binding has been verified through OAuth, DNS TXT, or reciprocal-link proof.

Verifier interpretation: the holder demonstrated control of at least one linked external public signal at verification time.

Multi-source verified

Two or more independent bindings have been verified.

Verifier interpretation: the resolver has stronger disambiguation value because multiple public signals point to the same commitment.

Strong public disambiguation

GitHub, ORCID, and a domain or public-profile binding are verified.

Verifier interpretation: the resolver has strong public identity-disambiguation value for knowledge workers, technical experts, authors, researchers, and public professionals.

Disputed

An unresolved dispute exists.

Verifier interpretation: do not rely on the disputed resolver or binding until reviewed or resolved.

Revoked

A resolver or binding has been revoked by the holder or operator.

Verifier interpretation: do not rely on revoked evidence as current evidence.

Binding expiry

Verified bindings expire after 180 days unless rechecked or refreshed. Expiry is not failure. It means the public account-control evidence should be renewed.

Hidden bindings

A holder may hide a binding. Hidden bindings should not count toward public trust level because public verifiers cannot inspect them.

What Ensan ID proves

• Public declaration consistency.
• Public commitment consistency.
• Account-control binding receipts.
• Domain-control or reciprocal-link evidence when verified.
• Separation of verified and unverified claims.

What Ensan ID does not prove

• Legal identity.
• Government identity.
• Global uniqueness.
• Biological personhood.
• Credential truth unless issuer-signed.
• Freedom from impersonation.
• Permanent future control of external accounts.