Feature 5
Human verification & vouching
Social attestation without legal ID.
Partial scan truth + vouch issuance + revoke live; abuse hooks next
About this feature
Why it matters
Communities need accountable human trust without KYC or buying merch. Three eligible vouchers can upgrade a card to Vouched Human - a public label backed by signed statements, not a government check.
Design decisions
Public signed vouch documents; default 280-char statement template; private notes never POSTed. Abuse controls: 3-vouch threshold, 5 active vouches/voucher/year, 90-day wait, one active vouch per pair. Scan shows count + recency, not a social graph.
Safety · privacy · security
Nonce replay protection on vouch POST. Voucher must be verified human or steward. Collusion rings mitigated by quotas and operator-only cluster hooks (planned).
Limits
Registration alone never displays as human verification. Bootstrap requires founding stewards or verified humans to vouch first. Revoke UI lists vouches from this browser session only.
Future directions
Vouch revocation flow, steward review queue, ceremony credentials (separate path), cross-operator federation.