AUTHORITY REGISTERGOVERNED REFERENCE

Authority Register

Shows who is authoritative for each data domain, the system of record and what Trusted ThingID is allowed to do.

AUTHORITY ≠ STORAGEWhere data is stored does not automatically determine who is authoritative.
GOVERNED REGISTER

Authority is qualified by data domain.

This register is the wording and boundary control for products, portals, APIs, evidence and external connectors.

Authority register
Data DomainAuthoritative PartySystem of RecordTrusted ThingID RoleDerived ViewRelated ClaimRelated EvidenceExternal ReferenceConnectorStatus
Official Product IdentifierIssuer / official identifier schemeAuthoritative identifier registry or issuing domainResolve, correlate and preserve source authorityResolution / alias viewCLM-IDENT-*EVD-RESOLVE-*GS1 / applicable official identifier rulesResolver ConnectorACTIVE REFERENCE
DPP Registry StatusEU/external DPP RegistryExternal authoritative registrySubmit, track, reconcile and display source statusRegistry status read modelCLM-DPP-STATUSEVD-REGISTRY-*Applicable EU DPP frameworkDPP Registry ConnectorEXTERNAL AUTHORITY
Economic Operator ResponsibilityCompetent source / verified organization recordsOrganization / mandate sourceRepresent responsibility with source and evidenceRole/responsibility claimCLM-ROLE-*EVD-ORG-*Applicable product / market rulesIAM / registry connectorREFERENCE
OwnershipLegally relevant source / evidence issuerEvidence-backed relationship recordsRecord and evaluate a claim; do not declare legal title by platform fiatOwnership claim / historyCLM-OWN-*EVD-OWN-*Jurisdiction / contract / transfer evidenceClaims / EvidenceREFERENCE
Custody / PossessionCustody/possession evidence sourceRelationship repositoryMaintain independent custody/possession stateCustody viewCLM-CUST-*EVD-CUST-*Contract / logistics / operational evidenceClaims / EventsREFERENCE
Repair / Maintenance EventAuthorised repairer / maintainerRepair evidence sourceValidate mandate, capture event and evidence, update lifecycle where allowedLifecycle event viewCLM-REPAIR-*EVD-REPAIR-*Product-group / repair rulesField Operations / LifecycleREFERENCE
Recall / RestrictionCompetent authority / authoritative regulatory sourceExternal authority / recall systemIngest, correlate, display and evidence resulting restrictionsRecall/restriction viewCLM-RECALL-*EVD-REG-*Market surveillance / safety rulesRegulator ConnectorEXTERNAL AUTHORITY
Device CertificateIssuing CA / Device PKIPKI certificate/status serviceValidate certificate lifecycle statusDevice certificate viewCLM-DEV-CERTEVD-PKI-*PKI policy / certificate profileDevice PKIREFERENCE
Runtime Device AppraisalApproved appraisal policy / attestation verifierAttestation evidence + appraisal serviceAppraise runtime evidence under versioned policyRuntime trust decisionCLM-DEV-RUNTIMEEVD-ATTEST-*RATS / deployment policy where selectedAttestation ConnectorREFERENCE ARCHITECTURE
AUTHORITATIVE SOURCES
Official IdentifierEconomic Operator SourceExternal DPP RegistryDevice PKICompetent Authority

Authority remains with the source/domain owner.

↓
TRUSTED THINGID CONTROL LAYER
Resolver / CorrelationPolicy / DisclosureClaims / RelationshipsLifecycleEvidence / Provenance

Resolve · govern · compose · evidence — without replacing external authority.

↓
COMPOSED EXPERIENCES
DPP ViewerConsumer / OwnerEconomic OperatorField OperationsRegulator / CustomsDeveloperDevice Operations

SOURCE OF RECORD ≠ DERIVED VIEW ≠ CLAIM ≠ EXTERNAL AUTHORITY