notes: events/talks/kericonf26-d2-03-mayfield-5ws

This data as json

path title type status classification words body
events/talks/kericonf26-d2-03-mayfield-5ws Thomas A. Mayfield: KERI Infrastructure and the 5 Ws (KERIConf 2026) summary v0.1 — 2026-10-15: drafted by Claude from the curated transcript; unread by Mark; marked partner on Mark's word 2026-10-21, paraphrase only, no quotation partner 799 # Thomas A. Mayfield: KERI Infrastructure and the 5 Ws (KERIConf 2026) **Abstract.** Thomas A. Mayfield of the Cardano Foundation gave an educational overview of KERI (Key Event Receipt Infrastructure) infrastructure organized around five roles beginning with W: wallet, witness, watcher, web and wizard. He then covered pre-rotation, multisignature control, ACDCs and delegation, and described how the foundation's Veridian project builds each role in open source. The talk is aimed at newcomers and online viewers as much as at the room. ## Summary Mayfield opened with the problem he sees in digital identity today: identity is borrowed. An issuer, registry or platform owns it, and if that party fails or revokes access, the person's identity goes with it. KERI, in his account, roots identity in keys the person controls, with no registry or platform dependency. He set out three core ideas: self-certifying identifiers derived from keys, critical actions signed and chained into a tamper-evident log, and verification by anyone replaying that log without phoning home to an authority. He called the identifier an AID (autonomic identifier) and its log a KEL (key event log), recording inception, rotation and interaction events, each signed and chained so that any alteration is detectable. He then walked through the five Ws, which he credited Samuel Smith with naming. The wallet is the holder's home: it generates and rotates keys, stores credentials, signs, and draws on device security; it is the only component the holder directly controls. Witnesses receive, sign and republish key events, acting like notaries that keep the log available and produce receipts, and the controller chooses them. Watchers are independent observers that detect duplicity, meaning conflicting versions of the same log, which he likened to the double-spend problem in blockchains. He thanked healthKERI for releasing its watcher and wallet code. The web is discovery and transport, through OOBIs (Out-Of-Band Introductions) that work like shareable links or QR codes, and the protocol is transport agnostic. Wizards hide low-level choices such as witness thresholds behind safe defaults and simple APIs, turning the protocol into a product. Each role can be operated, verified and replaced independently. He went deeper into four concepts. Pre-rotation commits a hash of the next keys at inception, so a thief of the current keys cannot forge a rotation, which gives post-compromise recovery and, in his view, resistance to future quantum attacks. Multisignature control lets an AID require M of N signers, with weighted thresholds, enforced during rotation too. ACDCs (Authentic Chained Data Containers) are signed and anchored to the issuer's KEL, use composable schemas, support graduated disclosure and chain back to a root of trust. Delegation lets authority flow down from a root, as in GLEIF's vLEI (verifiable Legal Entity Identifier) system, where a QVI (qualified vLEI issuer) is delegated from GLEIF's root and can be recovered top-down. He listed Veridian's open-source offerings: a mobile wallet, witness pools, planned watcher services, hosted endpoints and enterprise tooling. A short closing overview of Veridian's aims is poorly captured in the transcript. His four takeaways were that KERI moves identity to cryptography, the five Ws make it concrete, pre-rotation, delegation and multisignature make it enterprise-ready, and Veridian ships it as open source. In questions he explained that Veridian runs off-chain while the Cardano Foundation pursues QVI status in Switzerland and other on-chain uses, described early enterprise interest in Switzerland, and said the foundation contributes to WebOfTrust, noting Fergal O'Connor as a KERIA maintainer. An audience exchange discussed the value of multiple vendors for witnesses and watchers. ## Key terms five Ws, wallet, witness, watcher, web, wizard, autonomic identifier, key event log, pre-rotation, duplicity ## Claims and their evidence - A KERI identifier is derived from its keys and verified by replaying its signed event log, with no registry or central authority needed. [informative] - Pre-rotation commits a hash of the next keys at inception, so stolen signing keys cannot be used to forge a rotation. [informative] - The Veridian wallet is open source and available on iOS, Android and GrapheneOS, and Veridian plans to deploy watcher services in the second half of the year. [presenter-reported] - The Cardano Foundation is going through the process of becoming the first Swiss-based QVI. [presenter-reported] - Rotation events must satisfy the same multisignature threshold rules, so multisignature control cannot be bypassed during rotation. [informative] ## Related Veridian (Cardano Foundation), GLEIF's vLEI ecosystem, healthKERI's open-source watcher and wallet, WebOfTrust and KERIA, the verifiable smart contract report by GLEIF, Key State Capital and the Cardano Foundation, Reeve, DID Verifiable History, the Secure Asset Transfer Protocol talk later that day, SEDI (State-Endorsed Digital Identity). ## Provenance Drafted by Claude on 2026-10-15 from the curated transcript (d2-03-thomas-mayfield-keri-infrastructure-the-5-ws.md), all minutes read (the transcript ends at about 33 minutes of the listed 43:20). No quotations; paraphrase only. Not yet read by Mark.

Links from other tables