Aliases & Sovereign Domains

Aliases and domains improve discovery and usability; they are not the sovereign identity root.

Alias rule

An alias can map a human-readable name to an Entity ID. Treat the signed Entity manifest/identifier as authoritative and the alias as a resolvable convenience. Alias compromise must not be enough to replace the underlying Entity identity.

Domain rule

Sovereign-domain mechanisms can publish presence or resolution information while remaining replaceable. DNS, hosting and resolver custody do not become general authority over the Entity.

Operations

• Verify the Entity ID behind an alias before sensitive action.
• Keep domain/resolver changes as auditable events.
• Test recovery when the original resolver/provider is unavailable.
• Do not use a provider account ID as a substitute for an ENTITY identity.