Workbench

Policy playground

Decide what your context requires — then see which requirements the evidence meets. Rules map one-to-one onto checks; there are no weights, thresholds or scores.

Subject DID

Presets

RulesDID must resolve

Allowed methods

Allowed signing curves

Minimum 256-bit keysA valid key must be authorised for assertionMethodOrigin binding (DIF DID Configuration) requiredTLS certificate valid for ≥ 14 daysVerifiable history required (did:webvh)Evidence observed within 10 minutesCredential must verify with clear statusrequires a credential belowCredential issuer must be the subject DID

Credential (optional)

policy.json

{
  "name": "playground",
  "rules": {
    "didResolution": "required",
    "allowedCurves": [
      "Ed25519",
      "P-256"
    ],
    "minKeyBits": 256,
    "requireKeyRelationship": "assertionMethod"
  }
}

Each rule is evaluated against concrete evidence. A rule that cannot be evaluated is indeterminate — never a pass.