OCI VP checker

[bluesteens]

Steering summary

create a simple website interface with a tool that allows people to paste a credential presentation to check if it complies to OCI conformance criteria

---

This item is on hold until an estimate of the project is reviewed by Steering.

Scope

tool that verifies whether a base64 encoded presentation complies with OCI specs

• like this here: https://api-pilot.ebsi.eu/docs/tools/vc-validator

to be hosted on OCI GitHub, new repo

• proposal to add to OCI wallet confo as ref implementation for wallet checks

Why we need this

simple interop checks; increase trust in system by potential adopters; public education

---

• [x] Is Issue appropriate for OCI Architecture
• [x] Create Steering-level Summary of request
• [x] Assign Size
• [x] Assign Priority
• [x] Assign Label (if needed)
• [x] OCI affected Artifacts Identified
• [ ] Assign Triage - Artifact Version Target (v x.x.x Milestone)
• [ ] Assign Triage - Interop Profile Version Target (v x.x.x Milestone)
• [ ] Create sub-project (if needed)

Affected Parties (help determine Sunrise/Sunset):

• [ ] Trading Partners
• [ ] Issuers
• [x] Wallet Solutions
• [ ] PI Verification Solutions

Affected OCI Artifact

• [ ] Schema Document
• [ ] Identity Schema
• [ ] ATP Schema
• [ ] Issuer Conformance Criteria
• [x] Wallet Conformance Criteria
• [ ] VRS Solution Conformance Criteria
• [ ] Wallet API Specification
• [ ] Governance Document
• [ ] Conformance Program
• [ ] OCI Website
• [ ] Internal Process

Change Category (Guides Steering Review)

- Steering/Industry Review

• [ ] Business-Level (May affect business operations)
• [x] OCI Governance, Policy or website feature

- Steering/Industry Notification

• [ ] Technical-Level (Does not affect business operations)
• [ ] OCI Internal Process or Infrastructure

[rceleste125]

Format validator Properly structured VP / VC

[bluesteens]

May 8, 2023 Steering feedback: This will require maintenance over time (adjust to changing specs etc.). Does OCI need this, i.e. is it helpful for OCI target audiences? Should this be an OCI tool or maintained by one or few companies? OCI could promote to service provider's tool instead of hosting this. Could this be a time-limited project, i.e. OCI would not support forever?

[bluesteens]

Spherity's VP checker: https://github.com/spherity/oci-vp-checker

[bluesteens]

May 22, Steering feedback: demo by Spherity to OCI and idea of maintenance effort

[bluesteens]

Maintenance considerations:

• Adjustments of the checker would be triggered by OCI spec changes, bugs and possibly changes within underlying dependencies (e.g. libraries)
• note that tests exist and a failed test would prevent for any edits to be merged into the checker code, meaning it would remain at the then-current version
• checker would need to be kept on GitHub and hosted by another service. we estimate the cost of this to be $5/mo or less.

[bluesteens]

Steering call June 5:

• would OCI provide user support?
• schema check should be included - has VC been built correctly?
• wish: add translation of VP into human-readable format like EBSI checker
• estimated infra cost for hosting: $5-6/mth max
• test with some ppl to get reaction (deploy on Spherity infra for now)

[bluesteens]

additional checks re VC formatting/schema adherence require clarifications in the conformance documents, esp. https://github.com/Open-Credentialing-Initiative/schemas/issues/9