Issuance · revocation · proof
Credentials, signature and status
Credentials are trust artifacts, not the person. They may expire, be replaced or be revoked without erasing identity or automatically invalidating past acts.
In summary
The essentials
Status history and the relevant point in time must be preserved. Possession of a key, device or credential is not absolute proof of identity, authorship, entitlement or intent when there is a reasoned challenge.
How it works
Credential lifecycle
ValidIt may be used according to its purpose and assurance level.
→Revoked or replacedIt ceases to produce the future effects defined by law.
→History preservedThe system preserves evidence of when the credential was valid, expired or was replaced.
For the person
Practical consequence
When a credential is replaced in Sistema Candeia, the Civil Registry record and the person’s rights are not recreated. The system must separate the person’s legal state from the technical state of each credential.
Limits
Safeguards and conditions
Revoking a credential does not erase citizenship or property.
A private key is not absolute legal title.
A future replacement does not automatically invalidate an earlier legitimate act.
Constitutional basis
Read in the full text
See the related provisions in the Proposed Constitution.
Continue exploring
Related pages
How this page connects to Sistema Candeia
CredentialA credential proves an attribute or relationship; it does not by itself create citizenship, office or competence.
VerificationStatus, signature and the chain of trust must point to the issuing authority.
Current stateCandeia OS presents identity interfaces, but official institutional issuance is not yet available as a public operation.