Request for Comments · v0.1 draft

A DID method built for guardianship.

Every identity needs its own keys. Some also need a second, distinct kind of control: one or more guardians able to recover, revoke, or transfer it -- without that ever amounting to impersonation.

did:guardian:larrypage:google:com

Read the spec View on GitHub

Group guardianship

Any identity may be overseen by one or more guardians -- transferable, terminable, governed by configurable consensus thresholds. No other DID method has this as a first-class relationship.

Auditable and verifiable

All guardian recovery actions are signed by the guardian's key, which stay attributable in the replayed log.

Built on did:plc and did:web

Directly adopts did:plc's proven operation log, signing scheme, and recovery-window mechanism, but with did:web's human readable accessibility and multi-authority resilience.