Identity Substrate Considerations: KERI vs Atala PRISM (Open for Community Input)
As Elyon-Sol matures as a pre-execution governance layer, we’re evaluating how decentralized identity (DID) should integrate into the architecture. No decision has been made yet, and this post is intentionally framed to solicit community perspectives—especially from those with hands-on experience.
At a high level, the question is not “which DID is better,” but rather:
What identity assumptions best align with a refusal-first, authority-aware governance system?
Two candidates currently under consideration are KERI and Atala PRISM. They approach identity from meaningfully different angles.
KERI — Identity as Cryptographic Continuity
KERI emphasizes key event history and temporal integrity. Identity is defined by a verifiable sequence of events rather than by an external registry or platform.
Considerations:
Offline-first and ledger-independent
Strong guarantees around key rotation, compromise recovery, and continuity
No built-in notion of institutional authority or credential legitimacy
Authority must be modeled outside the identity layer
This raises questions such as:
Is identity continuity alone sufficient input for governance decisions?
Should authority always be resolved separately from identity?
Atala PRISM — Identity as Verifiable Credentials at Scale
Atala PRISM focuses on credential issuance, verification, and revocation, anchored to Cardano. It is designed with institutional adoption in mind.
Considerations:
Mature tooling and active ecosystem
Clear issuer/verifier roles
Strong auditability via ledger anchoring
Implicit trust assumptions tied to credential issuers
This raises different questions:
How should a governance layer treat “valid” credentials when authority may still be incomplete or contextually invalid?
Should institutional legitimacy ever shortcut governance checks?
Open Architectural Questions
Some of the questions we are actively exploring:
Should identity systems only establish continuity, leaving authority entirely external?
Is it preferable to treat credentials as claims rather than permissions?
How do different DID models behave under failure, ambiguity, or partial authority?
What identity assumptions age best under long-term audit and regulatory scrutiny?
We are also considering hybrid approaches, where one system provides identity continuity and another provides credential transport—while governance logic remains explicitly upstream of both.
Invitation
If you’ve worked with KERI, Atala PRISM, or other DID systems in production—or have strong opinions informed by governance, security, healthcare, or public-sector deployments—we’d genuinely value your perspective.
This is an exploration, not a selection announcement.
Thoughtful critique welcome.
#DecentralizedIdentity
#DID
#VerifiableCredentials
#KERI
#AtalaPrism
#Cardano
#IdentitySecurity
#DigitalTrust
#Governance