Setup

Establish corporate digital authority

Start with the corporation and its durable name. Add governance and bindings only after the root exists.

1 · Company2 · Digital name3 · Governance4 · Providers5 · Delegations6 · Publish

Message-based authority: creating a draft CorpID is not an authorization event. Governance, provider bindings, delegations and Epistery bindings are written only with a signed corporate authorization message (or explicitly marked development mode).

1 · Company

Corporation record

No SEC CIK is required. Public-company evidence can be attached later as an optional source.

Legal entity name

Jurisdiction

Primary domain

Short name / slug

Corporate Digital NameFor Rootz, the cryptographic address is also referenced as a Delaware trade name. Other companies may use a different legal basis.

Legal basis / evidence description

3 · Governance

Corporate Digital Authority Policy

Declare the process before relying on signatures produced under it. Keep the policy technology-neutral; provider details live in bindings below.

Policy version

Status

Who may approve provider bindings?

Who may delegate people / workloads / AI agents?

Consequential actions requiring escalation

Revocation / emergency process

4 · Providers

Bind an enterprise identity system

The provider should carry the same Corporate Digital Name (or an unambiguous digest/reference) inside its enterprise-issued artifact or claim set. CorpID records the other side of that relationship.

Provider

Tenant / organization ID

Corporate claim carried by provider

Evidence depth

Status

Credential / evidence reference

5 · Delegations

Delegate bounded corporate authority

A delegation is a signed message with subject, scope, conditions and time bounds — not an account role hidden in a database.

Actor type

Display name

Subject identifier

ScopesComma-separated. Be narrow enough that a verifier can decide whether a specific action was allowed.

Expires

Conditions

Epistery composition

Authorize an Epistery IdentityContract

This is deliberately not a new identity model. CorpID prepares one public-profile write. An already-authorized Epistery rivet must execute it. The contract then carries its own link back to the corporation.

IdentityContract address

Proof shape: CorpID lists the IdentityContract. The IdentityContract's _profile.corporate_authority lists the CorpID. An outsider can walk either direction. ERC-1271 can later prove a current rivet signed a specific corporate message.

6 · Publish

Open the public verifier

Verification is not a green badge. It should show every authority edge, its issuer, evidence depth, time and gaps.

Open verifier Return to control plane