Public Trust Register

Purpose

The register is the publication layer for trust-relevant claims. It does not replace the original source; it helps readers see which product/module a claim applies to, which evidence supports it, and where the boundary lies.

Record model

Each record should carry Claim ID, claim text, product/module, evidence class, source/issuer, version, scope/environment, issue date, review date, expiry where applicable, limitations, publication status and public artefact/reference.

Certificate records

SIS351224I008 is ISMS evidence, not biometric/algorithm certification. PCEB 26/04/06 is a PAD certificate for a bounded module/scope. PCEB 26/04/07 addresses identity-proofing/trust-service context for a bounded module. does not collapse these into a broad “CheckID certified for everything” claim.

Standards records

A standards-reference record means CheckID content/architecture is mapped to a standard; it does not itself prove implementation conformance. A conformance claim requires separate evidence.

Status

Claim governance uses VERIFIED, QUALIFIED, REFERENCE, SOURCE REQUIRED or REMOVE. SOURCE REQUIRED items do not appear as marketing claims; they remain in QA/source-gap records.

Freshness

Each evidence/standard record has a review date. When a certificate expires or a standard revision changes, the status is updated without rewriting the historical certificate basis.