Candeia identity and credentials
National Identity and Trust Authority
Once installed, administer the public credentials, authentication and trust services used within Candeia without acquiring power to alter recorded civil facts.
Pre-Foundation · permanent institution not installedConstitutional Proposal · reference text · not promulgated
Why it exists
Candeia needs to be able to prove access, signature and credential validity without giving a provider the power to decide who a person is. This separation protects continuity and reduces technical dependence.
How it separates identity, credentials and trust
Administer public credentials, authentication and the public identity and trust-services regime without acquiring power to alter civil facts.
Administer or supervise public credentials and authentication. Establish assurance levels, audit, interoperability, continuity, status and revocation. Maintain inclusive alternatives to biometrics, a single document or a specific provider, and alternative proof pathways.
A three-member board: 1 appointed by the President; 1 chosen by the Data Protection and Digital Rights Authority; and 1 by the National Council of Justice, all from public lists of the Constitutional Appointments Commission.
Each source chooses its seat and may not instruct the member selected. The process begins from previously qualified public lists.
Single, staggered six-year terms.
Autonomy over staff and decisions; incompatibility with party leadership, elective office, a Ministry, a political position of trust or a current material economic interest in a supervised provider.
An independent budget and staff autonomy under Art. 265.
For constitutional grounds, by decision of 6 of the 9 members of the Constitutional Court after proceedings initiated by those entitled to do so under Art. 257.
Independent appeal, provider audits, data protection, interoperability, an exit plan and judicial review.
Criteria for assurance levels, status and revocation, audit requirements, incident records, reasoned decisions and continuity documentation.
It does not alter civil facts, impose a single technology without a proportionate legal necessity or turn a foreign provider into a single point of civil existence.
What it administers in practice
- Administer or supervise public credentials and authentication.
- Establish assurance levels, audit, interoperability, continuity, status and revocation.
- Maintain inclusive alternatives to biometrics, a single document or a specific provider, and alternative proof pathways.
A credential does not define the person
The Authority does not alter civil facts, impose a single technology without a proportionate legal necessity or turn a provider into a single point of civil existence within Candeia.