Skip to content
GREEN FUTURETECH.
Explore

Research libraryTraceable by Design

Chapter 09 of 14 · Part III · Draft web edition

The passport should disclose a bounded product record

A useful passport identifies its product, states who makes each claim and reveals the limits of the supporting evidence. Proposed fields must remain distinct from future legal requirements.

Sections
6
Exhibits
4
Minutes
23
Sources
13
EX 40 · Pending: 250 illustrative garments

The cloth is woven from this chapter's 4 exhibits: each weft is one exhibit's own data, normalised; each warp group is a section. The probe reads the exhibit's own value where it crosses. Procedural visualisation, not a measurement.

The chapter as a draft: 6 sections, 2 exhibit wefts, one shuttle.

Lead exhibit · 39LayersillustrativeDifferent readers need different access to the same claim boundary
PublicProduct scopeIssuer and limitsRelease stateBuyerEvidence indexPermitted filesMethod detailsAuditOriginal recordsReview historyCorrectionsShared controlField dictionaryAccess decisionsRelease register

Read-outPublic: Product scope, Issuer and limits, Release state

Method and source

Illustrative GFT design. Public visibility, evidence access and evidential acceptance are independent decisions. No deployed access control or independent assessment is claimed.

Unit: proposed disclosure layers. Status: illustrative. Sources: S19, S21, S26, S29. Illustrative figures are teaching examples, not measured factory results.

The chapter's warpBar: share of the reading · square: an exhibit

Section 9.0 · Opening · 1 min · no exhibit of its own · one movement Go to section ↓

Overture · 1 min

A product passport should publish the narrowest useful record that its evidence can defend. GFT proposes a product identifier, a declared product boundary, field-level evidence links, an accountable issuer and an explicit release state. The record should reveal unknowns and restrictions rather than turn them into reassuring blanks. This chapter supplies a proposed schema, a field-status register and illustrative reader views. These are design recommendations for an educational prototype, not evidence of a deployed system, an approved certificate or present legal conformity.

¶ 01

9.13 min · 9 paragraphs · read with a related exhibit

Current policy does not settle the final textile schema

As of 30 October 2026, the European Commission's textile passport page places adoption of the textile delegated act in Q4 2027 on an explicitly indicative timeline. It says exact information requirements will be defined through delegated acts and supporting technical specifications. That planned adoption is not a universal application deadline. A supplier should therefore distinguish preparing data from asserting compliance with a final textile schema.[S14]

The Commission describes the Ecodesign for Sustainable Products Regulation as framework legislation under which concrete product or horizontal rules are developed subsequently. Its implementation page describes working plans, impact assessments and consultation. Those stages explain why a useful data project can begin before every product-specific requirement is settled. They do not make a prototype's fields legally sufficient.[S15]

¶ 02 · 1 source

S15

GFT recommends a policy register with separate entries for the framework, product-specific rulemaking, technical specifications and application conditions. Each entry should retain the official document, its status, the responsible reviewing role and the decision it affects. An entry without an established application condition should say that the condition remains to be confirmed. The register must not turn a consultation milestone into a shipment authorisation.

¶ 03

The proposed release process has distinct legal and evidential questions. The legal reviewer determines the applicable market and product obligations from current authoritative texts. The evidence reviewer determines whether the supplied records support the particular statement. A positive answer to either question cannot substitute for the other. This chapter is not investment, legal or tax advice. Clause-level legal analysis belongs to the companion legal paper and requires the relevant texts before any compliance claim is made.

¶ 04

A practical procurement brief should separate stable capabilities from changeable mappings. Stable capabilities include preserving evidence references, identifying the issuer, controlling disclosure and exporting the record. Changeable mappings include which fields a particular market requires, which vocabulary expresses them and which person must supply them. GFT recommends buying the ability to update those mappings under change control, with an auditable comparison of the old and new definitions.

¶ 05

Consider an illustrative buyer request for a passport described simply as compliant. The proposed response is a requirements clarification sheet within the project, not a compliance badge on the product. The sheet identifies product scope, intended market, applicable instrument, responsible operator and acceptance evidence. Until that mapping is approved, the interface should describe a voluntary product record. Commercial urgency does not resolve an unspecified legal test.

¶ 06

The Commission lists possible information categories including identification, composition, origin and use or repair information, subject to final requirements. Its sector overview separately describes rules on fibre names and composition labelling. GFT therefore recommends treating composition labelling, provenance evidence and future passport requirements as distinct review items. A composition statement does not establish where cotton grew, and an origin narrative should not displace the applicable composition review.[S14][S34]

¶ 07 · 2 sources

S14S34

Note

A useful policy register also records what would trigger reconsideration: a revised requirement, a changed product category, a new destination market or an altered operator role. The proposed owner should assess the impact on existing records as well as future releases. Replacing the interface template without reviewing already issued claims would leave readers with inconsistent meanings under an apparently stable product identity.

¶ 08

9.24 min · 1 sub-steps · 1 exhibit

A proposed passport needs a field-level evidence map

Exhibit 3813 paragraphs step it

Exhibit 38RegisterillustrativeEvery proposed field needs evidence and a disclosure decision
Field
Product and batch
Concept status
Source-backed
Evidence
Identity record
Default view
Public summary

Read-outField: Product and batch. Concept status: Source-backed. Evidence: Identity record. Default view: Public summary

Open the full register (8 rows)
Product and batchSource-backedIdentity recordPublic summary
CompositionSource-backedScoped declarationPublic if released
Manufacturing siteSource-backedProduction recordApproved detail
Cotton provenanceSource-backedCustody chainBounded summary
Care instructionsSource-backedApproved guidancePublic
Evidence pointerGFT proposalIndexed documentRole restricted
Release statusGFT proposalReview decisionPublic
Legal field setFuture to confirmApplicable textReview register
Method and source

Illustrative GFT field register. Source-backed concepts do not establish a final mandatory textile schema. Local evidence and access rules are proposals.

Unit: proposed field classes. Status: illustrative. Sources: S14, S19, S28, S34. Illustrative figures are teaching examples, not measured factory results.

9.2 · Introduction · paragraph 1 of 13

The UN Transparency Protocol product-passport specification distinguishes product information, performance claims, conformity links and upstream traceability links. The opened page is explicitly work in progress and suitable for pre-production pilots. It offers a useful comparison vocabulary for this proposal, not a declaration that an implementation meets EU law. GFT recommends pinning the compared version and recording every local extension before using its terms in an exchange.[S28]

For this chapter, each proposed field has a semantic classification as well as a value. A source-backed concept means an opened reference discusses that category. A GFT proposal means this chapter recommends its local structure or control. A future requirement to confirm means the relevant legal obligation is unresolved for the intended use. These classifications can coexist: a composition concept may be source-backed while its local evidence-pointer format remains a proposal.

The field-evidence register in Exhibit 38 defines the proposed minimum review surface. The entries are qualitative design choices, not collected factory data. Public availability is conditional on lawful disclosure, current evidence and release approval. The table deliberately avoids describing any row as a final mandatory textile passport field.

The table establishes a review obligation, not a guarantee of evidence quality. A link to a declaration supports only what that declaration actually covers. A product model's generic bill of materials should not silently become the measured composition of every finished batch. GFT proposes recording whether composition is declared, tested or calculated, together with the covered component, unit basis and version. Differences between those bases should remain visible to the reviewer.

A proposed machine-readable record should contain a record identifier and revision, a product reference and granularity, an issuer reference, a publication timestamp, a field collection and a release decision. Each field should carry its value or explicit non-value state, evidence reference, method reference where needed, observation period, review date and disclosure class. These are local design requirements. They should be mapped to an external schema only after the mapping is tested for meaning as well as syntax.

GFT proposes distinct states for absent, unknown, withheld and not applicable. Absent means the expected field or observation was not supplied. Unknown means the question was considered but the value remains unresolved. Withheld means a value is held under a stated restriction. Not applicable needs a recorded reason tied to the product boundary. None is equivalent to measured zero, independently verified or permission to infer a favourable result.

The proposed field-status register should also name the person acting in the responsible role and identify the blocking condition. An absent origin record may require upstream retrieval; a withheld record may require an access decision; a disputed record requires adjudication. A generic incomplete flag would conceal those different actions. The public view can simplify the wording, but the internal state must remain specific enough to direct the next decision.

An illustrative record might identify a garment batch, describe its cotton-rich outer fabric and state that a bounded country-of-cultivation claim is under review. Its sewing location could have separate production evidence. Care instructions could already be approved. The record should publish those independently assessed fields without presenting an overall green badge that implies the pending provenance claim has passed. A shared screen is not a shared evidential boundary.

The proposed export must preserve the distinction between missing data and restricted data. A receiving system should not infer missing evidence merely because it lacks access to a protected file, and should not infer evidential adequacy from a protected link. GFT recommends separate machine states for evidence existence, access availability and review outcome. That separation allows a buyer to request the right permission without changing the claim itself.

9.3 The proposed schema should reject ambiguous field states

GFT proposes explicit types and consistency rules for the local schema. Product and evidence identifiers are strings with declared namespaces. A timestamp carries a timezone and distinguishes observation from publication. Quantities are numeric values paired with units and a stated basis; a percentage without its denominator is incomplete. Enumerated states use controlled terms rather than free-text approximations. These are proposed validation rules, not an assertion that an external standard mandates this particular record structure.

The proposed value rule is exclusive: a field contains either an admissible value or a non-value state with its reason. A withheld field may reference a restricted evidence index, but must not export its protected value in another attribute. A released claim must identify its approving decision and supporting evidence version. A superseded claim must point to its replacement, while a withdrawal may have no replacement. The validator should reject contradictory combinations instead of choosing whichever attribute is easiest to display.

An illustrative public record could read: product, demonstration garment batch; composition, declared outer-fabric composition available; cotton provenance, pending evidence; manufacturing location, manufacturer declaration; independent assessment, not supplied; care, approved instructions available. Its restricted counterpart could expose the relevant document references and reviewing role. These examples deliberately contain no allocated commercial identifier or real supplier identity. Their purpose is to show how bounded wording can remain useful before every desired claim is admissible.

The proposed record examples should be retained as fixtures for the later implementation. An expected-output file should show the public, buyer and audit renderings of the same input, including withheld and disputed fields. A schema change should be checked against those expected meanings. Technical acceptance would require the implementation to produce the intended disclosure, not merely accept a syntactically valid record. No implementation or fixture execution is claimed by this writing lane.

9.42 min · 8 paragraphs · read with a related exhibit

A data carrier points to information and can be copied

GS1 Digital Link provides syntax for representing identification keys in web addresses, including batch and serial qualifiers. The resolver standard addresses discovery of related information and services through typed links. These standards help organise addressing and resolution. They do not by themselves establish that a physical garment carrying an address is the garment described at that address.[S12][S13]

GFT proposes treating carrier selection as an operating decision. The pilot should compare the intended label substrate, print process, attachment point and expected handling conditions. It should test whether people can find the identifier after ordinary use, whether the printed alternative remains readable and how replacement labels are authorised. No durability interval or scan-success result is assumed here; both need measurement under an agreed protocol.

¶ 02

The copied-code case should be demonstrated explicitly in the prototype. An illustrative legitimate batch record can be reached by a label attached to an unrelated item. The page can be technically available and the product record internally consistent while the attachment is wrong. GFT therefore proposes a reader message that explains what the code identifies, together with a discrepancy route for mismatched product descriptions. The message should avoid promising authentication from a successful scan.

¶ 03

The proposed operating controls include controlled label issue, reconciliation of replacement requests and retained links from retired labels to their replacements. A replacement should preserve the product identity where the physical identity has been established. It should not create an apparently new product merely to erase an unresolved mismatch. The responsible release role must decide whether a disputed attachment requires a warning, an identity investigation or suspension of the associated claim.

¶ 04

An illustrative counterfeit exercise should give the reviewer both a copied label and the original record, then ask what each proves. The expected conclusion is bounded: the label reveals a pointer, the record reveals the issuer's statements and the physical checks determine whether the attachment is credible. Designing the public interface around those separate questions prevents the familiar but unsupported inference that reachable information proves an authentic item.

¶ 05

GFT recommends an explicit carrier-to-record mapping with creation, replacement and retirement events. This is an interface requirement, not a replacement for the event exchange design in the preceding chapter. The mapping should reference the controlled product identity and retain the authorising decision for each change. A buyer receiving a record export should be able to distinguish a replaced carrier from an altered product claim without guessing from file names.

¶ 06

The reader also needs a route that does not require scanning. GFT proposes a printed identifier and a short route to a search form, with understandable error messages when the identifier is not found. The search result should show the product boundary before offering deeper evidence. A failure to resolve should remain a retrieval failure until investigated; it should not automatically accuse a supplier or certify the item as false.

¶ 07

Operational acceptance should include deliberately awkward conditions: partial print damage, a replaced label, the wrong batch suffix and an unavailable evidence link. The proposed review should record what the user saw and whether the next action remained clear. Passing only the pristine-label case would leave the design's central uncertainty untreated. The full adverse-case pilot remains the responsibility of the later pilot chapter, while this chapter defines the required disclosure behaviour.

¶ 08

Interlude · the cloth half-woven

4 exhibits carry this chapter's argument.

Woven: sections 9.0 to 9.4Still to weave: 9.5 to 9.7

  1. 38Every proposed field needs evidence and a disclosure decisionRegister
  2. 39Different readers need different access to the same claim boundaryLayers
  3. 40Unresolved garments remain outside the released origin statementBar chart
  4. 41Service exit requires a readable export before routing changesFlow
Hover or focus an exhibit to light its weft; select it to jump to it.

9.53 min · 9 paragraphs · 1 exhibit

Public and restricted views need different disclosures

The European Data Protection Board explains purpose limitation and proportionate collection of personal data, and discusses when the GDPR applies. GFT uses these principles as a design reference, without assuming that every Cameroon operation falls within that regulation. Applicable local and cross-border requirements need separate assessment. Public farmer identities, personal contact details and unnecessary precise locations should not be a default condition for explaining a garment's provenance.[S19]

GFT proposes a public summary, a controlled buyer view and an audit evidence view. The public summary should identify the product and disclose approved claim wording, its scope, the issuer and material limitations. The buyer view should expose the relevant evidence index and permitted supporting documents. The audit view should permit reconstruction of the decision under an authorised mandate. These are proposed views of a governed record, not independent copies with unrelated facts.

¶ 02

The architecture in Exhibit 39 separates reader purposes from the common release register. It is an illustrative disclosure model, not a deployed access system. A change in a claim's release state should be reflected wherever the claim appears. Restricting a document should affect access to that document, not erase the record that a review occurred or expand what the public wording is allowed to imply.

The common control layer does not require every reader to see every underlying identity. GFT proposes that the public summary use an appropriate aggregation while the evidence index retains the controlled reference needed for an authorised review. Aggregation must preserve meaning: a regional statement cannot become a farm-specific claim through attractive map design. Where the available evidence supports only a broader location, the public statement should retain that broader boundary.

¶ 04

NIST's zero trust guidance separates authentication and authorisation and rejects implicit trust based solely on network location. GFT's proposed consequence is field-specific access after the user and permitted purpose have been established. A buyer's commercial relationship should not automatically grant access to worker records or unrelated supplier contracts. Access approval, evidence review and claim release should have distinct recorded outcomes.[S26]

¶ 05 · 1 source

S26

GFT recommends keeping contract prices and sensitive commercial terms outside the public view unless a separately authorised disclosure has a defined purpose. The evidence owner should document what is shared, with whom and why. An audit pack may require different detail from a purchasing pack. The passport should state an evidence-access route without suggesting that every requester has an unconditional right to all underlying documents.

¶ 06

A restricted link must not serve as a decorative assurance badge. Proposed wording should distinguish evidence available to authorised reviewers, evidence reviewed by the manufacturer and evidence independently assessed for a defined claim. If no independent review occurred, the interface should say so. A public reader cannot judge a hidden document, and the interface should not invite the reader to treat inaccessibility as proof of rigour.

¶ 07

The proposal should also account for the traces generated by using the passport. A product-information request should not become a reason to build an unnecessary history of individual readers. GFT recommends separating service diagnostics from product evidence and collecting only what the defined function requires. The operational design should specify retention, deletion and authorised access for those diagnostics before enabling analytics. These controls remain proposals until implemented and examined.

¶ 08

An illustrative access challenge should ask a buyer to open a permitted declaration, then attempt an unrelated restricted file. The expected result is usable access to the former and a clear denial for the latter, without leaking content in previews, search results or exports. This is a proposed acceptance case, not a reported security test. Wider identity administration and governance remain with the companion governance and infrastructure papers.

¶ 09

9.63 min · 9 paragraphs · 1 exhibit

Product claims need visible issuers and method boundaries

Exhibit 409 paragraphs step it

Exhibit 40Bar chartillustrativeUnresolved garments remain outside the released origin statement
0200400600600Released250Pending150Disputed

Read-outReleased: 600 illustrative garments

Method and source

Illustrative inputs: 1000 garments in separate batches, comprising 600 supported, 250 pending and 150 disputed. Counts sum to 1000. Coverage is respectively 60, 25 and 15 percent by garment count, not fibre mass fraction or certification.

Unit: illustrative garments. Status: illustrative. Illustrative figures are teaching examples, not measured factory results.

9.6 · Introduction · paragraph 1 of 9

The W3C credential model distinguishes issuers, holders and verifiers and explicitly separates verifiability from the truth of encoded claims. The UNTP conformity-credential draft separately describes an assessment body as the issuing party for that credential. GFT's proposed interface should therefore show who made a product statement and who, if anyone, assessed it, without merging those roles into an undifferentiated verified label.[S21][S29]

A proposed claim object should hold the claim text, subject boundary, issuer, issue date, method reference, evidence references, assurance basis and current release state. Where an assessor exists, its identity and assessment scope should appear separately. Where none exists, the record should describe the claim as the issuer's declaration. This chapter specifies disclosure; detailed signature checks and issuer trust policy belong to the following chapter.

Release should be claim-specific. GFT proposes draft, pending evidence, released, suspended, withdrawn and superseded states, each with an authorised transition and retained reason. A withdrawn origin statement should not cause approved care information to disappear. Equally, a released identity field should not let a pending sustainability claim inherit approval. The public record should present the current decision and provide enough historical context to explain material changes.

The illustrative example below measures release coverage only. It does not estimate the proportion of certified cotton or prove geographical origin. The assumed decision units are finished garments grouped into distinct batches. This keeps the arithmetic tied to an administrative release decision, rather than implying that missing evidence can be spread evenly through a physical blend.

The release profile in Exhibit 40 preserves the unresolved denominator. Each column is a decision state under the hypothetical case. The illustration cannot establish certificate eligibility, the truth of the assumed evidence or the physical distribution of cotton. Those require the custody and reconciliation methods developed earlier in the paper.

GFT proposes showing the denominator beside any completeness or release statistic. The reviewer should know whether coverage refers to garments, batch records, mass or required evidence fields. A product with a complete identity record and unresolved origin evidence should not be scored as partly proven origin merely because most form fields are populated. A metric must describe its decision unit, not reward data-entry activity.

Water and carbon statements need their own methods, units, periods and system boundaries. GFT proposes linking them only after the relevant assessment has been reviewed under the companion water and impact methods. Cotton's declared origin should never populate an impact field automatically. In the illustrative prototype, an unavailable assessment should remain unknown, with no favourable default value and no substitution of a sector average for a product result.

A proposed correction notice should identify the affected claim, the previous wording, the reason for change and the current permitted use. The notice should distinguish a clerical repair from newly discovered contradictory evidence. GFT recommends preserving the original decision record for authorised review while ensuring the public view no longer promotes an unsupported statement. The goal is to make a changed conclusion understandable without requiring the reader to reconstruct internal event logs.

9.73 min · 11 paragraphs · 1 exhibit

A passport must remain useful when a supplier or service changes

Step 1 of 6Confirm control

Exhibit 41 · illustrativeService exit requires a readable export before routing changes

Confirm controlExport recordsRestoreprivatelyCheck readbackChange routingCheck oldlabels
Confirm controlExport recordsRestore privatelyCheck readbackChange routingCheck old labels

Confirm control

Confirm control. Starting point. Leads to Export records. · illustrative

The resolver standard describes links, discovery and redirection; it does not remove the need to govern the domain carrying the identifier.

Export records

Export records. From Confirm control. Leads to Restore privately. · illustrative

Restore privately

Restore privately. From Export records. Leads to Check readback. · illustrative

Check readback

Check readback. From Restore privately. Leads to Change routing (Pass). · illustrative

Change routing

Change routing. From Check readback (Pass). Leads to Check old labels. · illustrative

Check old labels

Check old labels. From Change routing. End point. · illustrative

Method and source · Exhibit 41

Illustrative GFT procedure informed by resolver functions and supplier-risk guidance. Proceed only after readback passes; retain the existing route or publish an explicit status notice if safe continuity cannot be demonstrated.

Unit: proposed continuity steps. Status: illustrative. Sources: S13, S27. Illustrative figures are teaching examples, not measured factory results.

9.7 · the bodyExhibit 41 above; its figures are illustrative where marked.

The resolver standard describes links, discovery and redirection; it does not remove the need to govern the domain carrying the identifier. NIST's supply-chain risk guidance addresses risks arising from technology products and services. GFT's proposed consequence is to make continuity, controlled export and service replacement explicit procurement conditions, rather than assume that a supplier's current interface will persist for the product's useful life.[S13][S27]

GFT recommends assigning responsibility for the identifier namespace, domain renewal, routing configuration and evidence custody. Those responsibilities may sit with different roles, but their handoffs must be recorded. A platform change should not require replacing every physical label where the existing identifier remains valid. The proposed design keeps a controlled address stable while the authorised service destination changes under review.

¶ 02

The transition in Exhibit 41 requires an independent readback before routing is changed. It is a proposed continuity sequence with no promised duration. If the export loses access restrictions, revision links or evidence attachments, service exit has not succeeded merely because a replacement page opens.

An illustrative abandoned-service case should include a product whose original supplier can no longer answer questions. GFT proposes preserving the last approved record with a visible status date and an explicit warning where ongoing confirmation is unavailable. A successor operator should identify its authority before making changes. Custody of a database does not alone authorise that operator to restate another party's claim as its own. If no lawful continuity route exists, a limited historical record is preferable to a current-looking assurance statement.

¶ 04

The proposed exit package should include the field dictionary, vocabulary versions, identifier crosswalk, release decisions and attachment index alongside the records themselves. Export acceptance should test relationships, not only file counts. The reviewer should establish that a former public link reaches the intended replacement, that a historical claim is still recognisable and that an unresolved restriction remains visible. Any missing relationship should enter the exit defect register before the routing decision.

¶ 05

The proposed readback should reconstruct the product identity, current release state and material historical changes using the exported data. It should retrieve the permitted supporting files and demonstrate that restricted files remain restricted. It should also expose unresolved references rather than quietly discard them. GFT recommends acceptance by a reviewer who can interpret the record without access to the former vendor's private dashboard.

¶ 06

Accessibility is part of continued usefulness. WCAG provides testable web-content criteria covering keyboard operation, alternatives for non-text content, reflow and understandable interaction. GFT proposes a text-first product record with labelled controls, visible focus and status messages that do not depend only on colour. These are design requirements informed by the standard, not a claim of tested accessibility or a conformance result.[S31]

¶ 07 · 1 source

S31

The proposed acceptance session should include keyboard access to product search and evidence requests, enlarged text, a narrow display and an unavailable image. It should check whether claim limitations appear before a reader acts on the summary. GFT recommends reporting observed barriers and their fixes, rather than awarding accessibility status from a component library's description. Language support should preserve claim meaning and mark whether an approved translation or only the source text is available.

¶ 08

The Commission's textiles strategy takes a lifecycle perspective, and its passport overview discusses information relevant to repair, reuse and recycling. GFT proposes preserving the original manufacturing record while appending clearly attributed lifecycle observations. Circular-process design belongs to the companion circularity paper. A repair entry should describe the intervention and evidence available; it should not automatically reissue the original manufacturing claim for replacement material.[S16]

¶ 09 · 1 source

S16

An illustrative resale record could state that a garment has an observed repair and a replacement label linked to its existing identity. If the repairer cannot establish the replacement fabric's origin, the new component should remain outside the original provenance claim. The useful outcome is a more informative bounded record, rather than an apparently unbroken claim created by overwriting the first composition declaration.

¶ 10

GFT recommends closing the design review with a release memorandum containing the proposed field dictionary, current policy-status register, approved wording, unresolved evidence list, disclosure permissions and continuity test specification. The educational trace-a-garment prototype should present these distinctions directly. It should remain labelled as a prototype until actual implementation and evidence review support a narrower operational claim. The passport earns its usefulness by carrying limits as carefully as it carries product information.

¶ 11

Check the record

The chapter keeps its sources within reach.

Every knot is a source this chapter cites; select one to read its record, or filter the register by grade. Publication dates and inherited-source limits stay explicit. Read the paper's full evidence summary.

13 sources · 28 citation marks on this pageMost cited: S13, 3 times

Grade AGrade BGrade CKnot size: citations on this page

All 13 records shown

c09-S12 · Grade A

GS1

GS1 Digital Link Standard: URI Syntax, Release 1.7.0

A URL is a URI starting with http or https.

2026. Register access date: 2026-10-30. Source provenance is supplied by the paper evidence register.

Open the recorded source ↗
Chapter source notes

S14 European Commission, DG GROW. 2026-10-30.

S15 European Commission. 2026-10-30.

S34 European Commission, DG GROW. 2026-10-30.

S28 UNECE / UN Transparency Protocol. 2026-10-30.

S19 European Data Protection Board. 2026-10-30.

S12 GS1. 2026.

S13 GS1. 2026.

S21 World Wide Web Consortium. 2025-05-15.

S26 National Institute of Standards and Technology. 2020.

S29 UNECE / UN Transparency Protocol. 2026-10-30.

S27 National Institute of Standards and Technology. 2024-11-01.

S31 World Wide Web Consortium. 2024-12-12.

S16 European Commission, DG Environment. 2022.

Keep the thread · chapter 09 of 14

Chapter 10 picks up the thread.

Move the shuttle along the rack to preview any chapter: its sections, exhibits and reading time. Draft web edition. This research is not investment, legal or tax advice; illustrative models are not measured factory results.

The paper's rack · 14 boltsBolt length: reading time

10Part III: Passports must preserve evidence

Digital signatures preserve assertions while trust needs governance

Cryptography can preserve an assertion and identify its signing authority, but accepting a textile claim still requires physical evidence and an explicit trust policy.

  • 10.1An issuer's identity does not prove a physical claim
  • 10.2Credential verification needs more than a signature check
  • 10.3Identifiers need a recovery and control model
  • 10.4Revocation changes what a reader should accept
Reading time
22 min
Exhibits
4
Sections
6
Continue to chapter 10
← Previous: chapter 08, Shared identifiers and event meanings make records portableContinue the threadChapter 10 · Digital signatures preserve assertions while trust needs governance

Find a thread.

Type to search.