The Minister's journey

The National Business Registry deploys a vs-agent, an open source Business Wallet natively integrated with the public Verana infrastructure. A DID is generated for the register; Helvetia Trust Services (demo), an accredited ECS-Organization issuer, runs the KYB - trivially, for a national institution - and issues the register's Organization credential. The register self-issues its Service credential: the Republic's first green check.

The Verana ECS Ecosystem accredits the National Business Registry as an ECS-Organization ISSUER. This is the keystone decision of the whole build: Business IDs are plain ECS-Organization credentials - issued by the institution that already IS the source of truth about Verandian companies. KYB stops being paperwork and becomes a lookup.

• Verandia deliberately joins the shared ECS ecosystem instead of building a national silo: a Verandian company's Business ID is recognized by every Verana-aware wallet and service worldwide.
• From now on, the state's own register issues - and every issuance is anchored in the public registry, checkable by anyone.

The Civil Registry becomes verifiable the Verandian way: its Organization credential is issued by the National Business Registry - the Republic dogfoods its own register. Then it creates the Verandia Citizen ID trust ecosystem with a single schema, and two governance decisions that define the whole story: issuance is governed (only the Civil Registry issues), and verification is governed too - a service must register as a relying party before any wallet will share a Citizen ID.

• The schema carries eIDAS-2-PID-inspired claims: names, birth date, personal identifier, nationality, portrait.
• Governed verification is the eIDAS 2 relying-party registration, made structural: over-asking is not policed after the fact - it is impossible by default.

Aria walks into a registry office (or uses her existing eID) and receives her Verandia Citizen ID - straight into the Personal Wallet she already uses. Verandia does not build a wallet monopoly: any of the integrated open source wallets can be customized for the Republic, the way the EUDI reference app and its forks already are. The SD-JWT rail is the eIDAS-2-compatible one.

• One credential, every wallet: Hologram over AnonCreds/DIDComm, the EUDI-reference fork and the other OpenID4VC wallets over SD-JWT.
• Selective disclosure by default: a service that needs your age never sees your birth date.

Meridian Bank (demo) applies for its Business ID. The Business Registry looks itself up - the company exists, its directors are known - and issues the bank's ECS-Organization credential on the spot. The bank self-issues its Service credential and publishes its online-banking service under its DID. The anti-phishing payoff: your bank can finally prove it is your bank, before you type anything.

• KYB in seconds: the issuer IS the source of truth, so there is nothing to collect.
• Every Verandian company follows the same path - Solaris Bakery included.
• Banks are the most-phished brand category: a provable bank is the single highest-value green check in the Republic.

The Business Registry creates its second trust ecosystem: Legal Representation. Tomás Ferreira, managing director of Solaris Bakery (demo), connects to the register's service and identifies with his Verandia Citizen ID - reusable identity, the moment the whole architecture pays off. The register matches him against the company record and issues his Legal Representative credential: company, registry id, role, powers, validity.

• Issuance governed: only the Business Registry issues. Verification open: checking who represents a company is the register's public function - anyone may ask.
• The credential is revoked the day Tomás leaves the bakery - and every verifier knows within a scan.

The Tax Buro becomes verifiable (Organization credential from the Business Registry, of course) and registers as a VERIFIER of the Verandia Citizen ID. Meridian Bank does the same. From that day: Aria signs in to her tax space by presenting her Citizen ID - no password. Tomás opens the bakery's tax space and its bank account with his Legal Representative credential. Opening a personal account at Meridian is KYC in one scan.

• One credential, public and private sector: the same Citizen ID signs Aria in at the Tax Buro and opens her account at the bank.
• The wallet checks the verifier before sharing (Q3): who is asking, and are they authorized to ask for this?
• The portal decides from the issuer chain: Citizen ID from the Civil Registry, Legal Representative from the Business Registry. Two rules cover the whole Republic.

QuickCash Loans (demo) is a perfectly verifiable Verandian company - registered, green check, real Business ID. It would love to see your Citizen ID before selling you a loan. But it never registered as a relying party, and Citizen ID verification is governed: every compliant wallet answers its presentation request with a refusal. Trust is not authorization. And the fake refund portal from chapter 1? It fails at Q1 - it cannot even prove who it is.

• Trusted, but not authorized to request this credential: the wallet blocks the share, and Aria's data never leaves her phone.
• Fail-closed by construction: over-collection is not a policy promise, it is a protocol property.