Global Passport Operations

Issue passports from verified identity/authority/rights/evidence state, not from untrusted UI fields.

Issue

1. Load/verify issuing Entity.
2. Resolve rights/evidence/provenance inputs.
3. Select exact profile stack and mapping versions.
4. Construct canonical passport payload.
5. Sign under the authorized key.
6. Store the resulting passport and issuance event.

Verify

Use the layered procedure in Verify a Passport. Record precise outcomes for signature, authority, rights, evidence, profile and domain conformance.

Supersede

If state changes, issue a new passport/derivation. Historical signed passports remain immutable verification targets.

Domain packages

Configure organization-specific facts before deployment and run the package verifier/conformance fixtures. Placeholder facts are non-production.