BUSINESS AUTHORITY MATRIXARCHITECTURE INVARIANT

Authority is qualified by data domain.

Distinguish authoritative source, system of record, derived view, Mobile-ID role and external authority for each business fact.

AUTHORITY MATRIX

Displaying a field does not make the display authoritative.

Business authority matrix
Business FactOfficial AuthoritySystem of RecordDerived ViewMobile-ID RoleExternal RoleEvidence
Official identifierOfficial identifier scheme / authoritative sourceExternal/domain SoRResolver/read modelResolve/correlate/aliasRemain authoritative externallyIdentifier-source evidence
DPP contentEconomic operator / applicable authority by fieldDomain DPP repositoryPublic/restricted viewOrchestrate/policy-composeRegistry/authority may validate statusSource/provenance
EU Registry statusEU DPP RegistryExternal authoritative serviceLocal status cache/read modelRegister/reconcile/monitorAuthoritative statusConnector evidence
Ownership claimEvidence-backed claimant/issuer under applicable contextClaim/evidence storeOwner viewManage claim lifecycleExternal law/authority governs legal effectEvidence/provenance
Device certificateDevice PKICertificate registry / PKITrust viewLifecycle/orchestrateIssuer/PKI authoritative for cert statusPKI status evidence
Runtime device trustAttestation + policy decisionTrust appraisal recordCurrent trust viewAppraise/enforceAttester/verifier inputsAttestation evidence
TTID aliasTrusted ThingID resolver governanceResolver domainResolution resultAuthoritative for TTID alias onlyOfficial ID authority remains externalResolver evidence
Search indexDerived from authoritative/domain sourcesDerived indexSearch resultsIndex onlyNoneRefresh/provenance metadata