The days following the revocation announcement were a whirlwind of activity. The workshop had become a nerve center, a place where refugees and displaced people gathered to register their identities, share their stories, and build their credentials. Nadia had become something of a guide—helping newcomers understand the system, explaining how DIDs worked, showing them how to create their own paper wallets.
It felt good. It felt meaningful. She was no longer just surviving. She was helping others survive too.
But a shadow hung over everything.
Eli had warned her about the impersonation attacks. The Central Authority was generating fake DIDs that looked like real ones, using them to create confusion and doubt. So far, they’d targeted people with high profiles—community leaders, activists, people who’d spoken out against the system. But it was only a matter of time before they came for ordinary people too.
Nadia tried not to think about it. She focused on her work, on the people she was helping, on the future she was building. She checked her wallet app regularly, made sure her credential was still there, still valid.
She was doing everything right.
And still, it wasn’t enough.
It happened on a Thursday afternoon.
Nadia was at the community center, helping a young family register for the literacy program. The mother was nervous, clutching her toddler’s hand, uncertain about the strange new system Nadia was explaining. The father stood behind them, his arms crossed, his expression guarded.
“It’s simple,” Nadia said, pulling up her wallet app. “You generate a DID, you store your private key safely, and you get someone you trust to issue you a credential. Then you can prove your identity anywhere.”
The mother leaned forward, studying the app. “And this really works? The government accepts it?”
“They don’t have to,” Nadia said. “The math works. That’s what matters.”
She was about to demonstrate when her phone buzzed. Then again. Then again, a cascade of notifications that made her blood run cold.
SECURITY ALERT: Your DID may have been compromised.
WARNING: An impersonation attempt has been detected.
URGENT: Please verify your identity immediately.
Nadia’s hands started shaking. She opened the first notification and read the message:
“The Central Authority has registered a DID that appears to be a duplicate of yours. Please verify your identity through official channels.”
She scrolled through the messages, her heart pounding. There were dozens of them—alerts from the social proof system she’d helped build, warnings from people who’d tried to verify her identity and found a conflict.
Nadia looked up at the family. “I’m sorry,” she said, her voice trembling. “I have to go.”
She ran out of the community center without looking back.
The workshop was in an uproar when she arrived.
People were gathered around the main screen, their faces a mixture of fear and confusion. The teenager with the soldering iron was crying again. The older man was pacing. Several others were frantically checking their own credentials, worried that they might be next.
Nadia pushed through the crowd and found Eli standing at the center of it all, his expression grim but focused.
“What happened?” she demanded. “What’s going on?”
Eli pointed to the screen. “Look.”
Nadia turned and saw two DIDs displayed side by side:
Real DID: did:example:ab7c8d9e0f1a2b3c4d5e6f7g8h9i0j1k Fake DID: did:example:ab7c8d9e0f1a2b3c4d5e6f7g8h9i0j1l
They were almost identical. One character different. One tiny difference in a string of twenty-nine characters.
“It looks the same,” Nadia said. “To most people, it looks exactly the same.”
“Exactly,” Eli said. “The Central Authority is banking on that. They’re hoping people will confuse the two. That they’ll think the fake DID is the real one.”
Nadia felt her stomach drop. “But my credential is still valid. The timestamp proves it was issued before the revocation.”
“That’s not the problem,” Eli said. “The problem is confusion. If people can’t tell which DID is yours, they can’t trust your identity. The Central Authority is trying to make you seem unreliable.”
Nadia stared at the two DIDs. They were so similar. So easy to confuse.
“What do we do?” she asked.
Eli met her eyes. “We fight back. We prove that your DID is the real one. And we build a system that prevents this from happening to anyone else.”
The workshop fell into a frenzy of activity.
Eli pulled up the DID Document for Nadia’s real DID and the fake one side by side. The real document contained her authentication key and service endpoint. The fake document contained nothing—just a skeleton, a placeholder.
“They’re not trying to steal your identity,” Eli explained. “They’re not pretending to be you. They’re creating confusion. They want people to wonder: ‘Is this the real Nadia? Or is that one?'”
Nadia frowned. “But my credential is signed by Ms. Rivas. Theirs isn’t.”
“Right. But most people won’t check that deeply. They’ll see two similar DIDs and get confused. They’ll hesitate to trust either one.”
Nadia felt the anger building in her chest. “That’s not fair. That’s not how this is supposed to work.”
“It’s not,” Eli agreed. “But it’s how they’re playing the game. And we need to find a way to stop them.”
The solution came in the form of the Social Proof Oracle.
Eli gathered everyone in the workshop and explained the concept. It was a decentralized network of attestors—people who knew Nadia, who could confirm that her DID was real. They would each sign a statement: “I know Nadia. This is her DID.”
“Instead of one attestor,” Eli said, “we’ll have many. And they’ll all publish their attestations on the DLT. Anyone who wants to verify Nadia’s identity can check the Oracle. If a quorum of trusted attestors confirms her DID, then it’s real.”
Nadia thought about Ms. Rivas. About the teachers, the neighbors, the friends she’d made in the past two weeks. About the community that had embraced her, believed in her, helped her build a new life.
“We have the people,” she said slowly. “We have the community. We can make this work.”
The work began immediately.
Ms. Rivas was the first to sign. She sat at a computer, her expression serious, and created a statement:
“I, Ms. Rivas, confirm that I know Nadia Al-Hassan. Her DID is: did:example:ab7c8d9e0f1a2b3c4d5e6f7g8h9i0j1k. This attestation is made freely and without coercion.”
She signed it with her private key and published it to the DLT. Within minutes, the attestation was confirmed and recorded.
Next came the community credit union representative. She’d worked with Nadia, had seen her present her credential, had verified her identity. She signed a similar statement and published it.
Then came the volunteer coordinator from the literacy program. Then two teachers from the refugee school. Then a neighbor from the building where Nadia lived. Then a fellow volunteer from the community center.
One by one, they signed. One by one, they published. The attestations accumulated on the DLT, building a web of trust around Nadia’s identity.
“Look,” Eli said, pulling up the Oracle’s interface. “You can see the attestations accumulating. Each one confirms your identity. Each one adds another layer of proof.”
Nadia stared at the screen. There were twelve attestations now. Twelve people who’d said: “I know Nadia. This is her DID.”
“If a quorum of trusted attestors confirms your DID, the Oracle will declare it verified,” Eli explained. “And that verification is public. Anyone can check it.”
“How many attestors do we need?” Nadia asked.
“Ten for a basic verification,” Eli said. “Fifteen for a strong verification. Twenty for an unshakable verification.”
Nadia counted the attestations. Twelve. She needed eight more.
“Let’s get to work,” she said.
The next few days were a blur of activity.
Nadia reached out to everyone she’d met since arriving in the city. The shopkeepers who’d been kind to her. The neighbors who’d lent her things. The fellow volunteers who’d worked beside her.
She explained the situation. She showed them her DID. She asked them to sign a statement confirming her identity.
Most of them agreed. Some were hesitant, unsure about this strange new system. But when Nadia explained how it worked—how the signatures were cryptographically verified, how the DLT was immutable, how the Oracle provided a public record of trust—they came around.
“I know you,” one neighbor said. “I’ve seen you in the building. You’re always polite. You’re always helpful. Of course I’ll confirm your identity.”
“Thank you,” Nadia said, tears pricking at her eyes. “Thank you so much.”
The sixteenth attestation was the turning point.
It came from an unexpected source: a woman who’d been a member of the same community center as Nadia. She’d seen Nadia’s story on the community bulletin board, had read about her struggle to build an identity from scratch.
“I was in the same situation,” the woman said. “I know what it’s like to be invisible. When I saw what you were doing, I knew I had to help.”
She signed the attestation with her private key and published it to the DLT. Within seconds, the Oracle confirmed it.
“That’s sixteen,” Eli said, checking his screen. “You’ve crossed the threshold. Your identity is now strongly verified.”
Nadia felt a surge of relief so intense it almost knocked her over. “So the impersonation attack…”
“Is neutralized,” Eli said. “Anyone who checks the Oracle will see that your DID is verified by sixteen trusted attestors. The fake DID has nothing. No attestations, no verification, no proof. It’s just a string.”
Nadia stared at the screen. There were sixteen attestations now. Sixteen people who’d said: “We know Nadia. This is her DID.”
“You did it,” she whispered. “We did it.”
Eli smiled. “You did it. The technology provides the tools. But the community provides the trust. And you built that trust yourself.”
The community center held a celebration that evening.
People gathered in the main hall, food and drinks spread across the tables, music playing softly in the background. It was a celebration of resilience, of community, of the bonds that had been built in the face of adversity.
Nadia stood at the center of it all, surrounded by the people who’d believed in her. Ms. Rivas was there, her arm around Nadia’s shoulder. The teenager with the soldering iron was there, grinning from ear to ear. The older man who’d learned to use a tablet was there, nodding proudly.
“You’ve come so far,” Ms. Rivas said. “From invisible to verified. I’m so proud of you.”
Nadia felt the tears coming. “I couldn’t have done it without you. Any of you.”
The community credit union representative stepped forward. “We’ve been talking,” she said. “We want to implement the Social Proof Oracle for everyone. We want to build a system that protects everyone’s identity.”
Nadia nodded slowly. “That’s a great idea. But we need to be careful. We need to make sure it’s fair. That it doesn’t create new inequalities.”
The representative nodded. “We’ve already started working on a governance model. A way to ensure that the Oracle is accountable to the community.”
Nadia smiled. “Then let’s get started.”
Later that evening, Eli pulled Nadia aside.
“There’s something I need to tell you,” he said. “About the impersonation attack.”
Nadia tensed. “What?”
“We tracked the source of the fake DID. It came from an IP address associated with the Central Authority. They’re not just testing the system. They’re actively trying to undermine it.”
Nadia felt the fear returning. “What does that mean?”
“It means we need to be prepared,” Eli said. “This isn’t going to stop. They’re going to keep trying. They’re going to attack our identities, our credentials, our system. They’re going to keep fighting.”
Nadia looked around the room—at the faces of the people who’d supported her, believed in her, helped her build a new life.
“Let them fight,” she said. “We’ve already beaten them. We’ll beat them again.”
Eli nodded slowly. “I believe you. But we need to be smart. We need to stay ahead of them.”
Nadia met his eyes. “Then let’s stay ahead. Together.”
That night, Nadia sat alone in her apartment, staring at her paper wallet. It was still in her inner pocket, still precious, still irreplaceable.
She thought about everything that had happened. The impersonation attack. The Social Proof Oracle. The community that had rallied around her.
She’d been invisible once. She’d been nothing. But now she was something—someone with a verified identity, a community of believers, a future she’d built herself.
She pulled out her phone and checked the Oracle. Sixteen attestations. Strong verification. Proof that she existed.
She smiled. And then she started planning her next steps.
The Central Authority wasn’t going to stop fighting. But neither was she.
Table of contents:
Introduction
Chapter 1: The Central Identity
Chapter 2: A Self-Sovereign Self
Chapter 3: The DID Document
Chapter 4: The Verifiable Credential
Chapter 5: The Revocation Registry
Chapter 6: The Impersonation Attack
Chapter 7: The Social Proof Oracle <<<<<< NEXT
Chapter 8: The Selective Disclosure
Chapter 9: The Zero-Knowledge Attestation
Chapter 10: Owning Your Story
