|
| 1 | +# Atomic Granularity for Mandate-Related Attestations |
| 2 | + |
| 3 | +**Authors:** |
| 4 | + |
| 5 | +- Consortium Architecture Working Group AMS Track 4 |
| 6 | + |
| 7 | +- Boris Lingl, boris.lingl@datev.de |
| 8 | +- Alexander Manecke, a.manecke@telekom.de |
| 9 | +- Ignacio Ripoll, ignacio.ripoll@corpme.es |
| 10 | +- Iris Speiser, iris.speiser@datev.de |
| 11 | +- Marlene Urbschat, marlene.urbschat@datev.de |
| 12 | + |
| 13 | +## Context |
| 14 | + |
| 15 | +Individuals may hold multiple powers, mandates, or authorizations on behalf of an organization. |
| 16 | + |
| 17 | +The consortium needed to determine whether mandate-related attestations should contain multiple faculties or be limited to a single authorization scope. |
| 18 | + |
| 19 | +The core trade-off is between expressiveness and implementation simplicity. |
| 20 | + |
| 21 | +## Decision |
| 22 | + |
| 23 | +Mandate-related attestations shall be atomic. |
| 24 | + |
| 25 | +Each attestation shall contain exactly one faculty or one service authorization. |
| 26 | + |
| 27 | +Multiple powers shall be represented by multiple attestations rather than by composite authorization structures. |
| 28 | + |
| 29 | +## Consequences |
| 30 | + |
| 31 | +### What becomes easier? |
| 32 | + |
| 33 | +- Simpler issuance and validation processes. |
| 34 | +- Clear and unambiguous authorization semantics. |
| 35 | +- Improved interoperability across participants. |
| 36 | +- Easier lifecycle management of individual permissions. |
| 37 | + |
| 38 | +### What becomes more difficult? |
| 39 | + |
| 40 | +- Multiple attestations may be required for a single representative. |
| 41 | +- Presentation and management of large authorization sets may become more complex. |
| 42 | +- Real-world mandate structures may require aggregation mechanisms. |
| 43 | + |
| 44 | +### How do we address the risks introduced by this change? |
| 45 | + |
| 46 | +- Allow wallets and verifiers to present and process multiple attestations together. |
| 47 | +- Define guidance for bundling and presenting related attestations. |
| 48 | +- Reassess granularity requirements as additional use cases emerge. |
| 49 | + |
| 50 | +## Advice |
| 51 | + |
| 52 | +- 2026-06-11: Consortium Working Group: Prefer simple, composable attestations over complex multi-purpose credentials. |
| 53 | +- 2026-06-11: Technical Participants: Atomic credentials simplify interoperability and validation logic. |
0 commit comments