Group guardianship
Any identity may be overseen by one or more guardians -- transferable, terminable, governed by configurable consensus thresholds. No other DID method has this as a first-class relationship.
Request for Comments · v0.1 draft
Every identity needs its own keys. Some also need a second, distinct kind of control: one or more guardians able to recover, revoke, or transfer it -- without that ever amounting to impersonation.
did:guardian:larrypage:google:com
Any identity may be overseen by one or more guardians -- transferable, terminable, governed by configurable consensus thresholds. No other DID method has this as a first-class relationship.
All guardian recovery actions are signed by the guardian's key, which stay attributable in the replayed log.
did:plc and did:webDirectly adopts did:plc's proven operation log, signing scheme, and recovery-window mechanism, but with did:web's human readable accessibility and multi-authority resilience.