Executive Summary
An accredited investor or high-net-worth individual proves the same handful of facts - identity, accreditation, source of funds, income - over and over, once per unrelated transaction: a private placement here, a real-estate purchase there, an immigration filing somewhere else. Each counterparty's compliance officer re-verifies the same underlying facts independently, multiplying cost and friction for everyone involved. The Money Passport credential bundle aggregates four discrete attestations into one portable, cryptographically verifiable artifact so the holder proves the facts once and presents the resulting bundle repeatedly.
The bundle envelope binds four constituent-attestation references - each a hash of an independently Byzantine Fault-Tolerant-signed sealed receipt, plus a per-constituent freshness timestamp - under one bundle-level quorum signature. The four constituents are an Accredited Investor identity verification (aligned to SEC Rule 506(c)), a Proof of Funds attestation, a Source of Funds attestation produced by a corridor risk scoring engine, and an Income Verification. A configurable freshness policy - defaulting to 24 hours for identity and income, 30 days for proof of funds, 90 days for source of funds - triggers automatic re-attestation of any constituent that goes stale.
Problem Statement
Verifiable-credential standards such as W3C Verifiable Credentials and OpenID4VC solve the single-attestation case well - prove one fact, present one credential - but neither aggregates several distinct attestations into a single bundle with per-constituent freshness binding. Reusable-identity KYC platforms (Onfido's portable identity, Trulioo) get closer, but they are identity-only; they do not bundle Proof of Funds, Source of Funds, and Income alongside identity in one artifact. Purpose-built financial products (Plaid's Income Verification, Plaid Identity) each solve one piece well, but as single products, not as a bundled, corridor-risk-aware whole.
Mortgage and loan-origination document packages already aggregate KYC, income, and asset documentation - but as opaque PDF bundles a human reviewer opens and reads, not as cryptographically signed, quorum-verifiable artifacts a downstream system can check programmatically without re-parsing a document.
Why Existing Approaches Fall Short
- W3C Verifiable Credentials / OpenID4VC: single-attestation primitives; no native multi-constituent bundle with per-constituent freshness.
- Onfido / Trulioo portable identity: identity-only reusability; does not bundle funds or income attestations.
- Plaid Income / Identity: single-product verifications, not bundled with a corridor-risk-scored source-of-funds constituent.
- Mortgage / loan-origination doc packages: opaque PDF bundles requiring human review, not cryptographically quorum-verifiable artifacts.
Technical Architecture
The Four Constituents
| Constituent | What It Attests | Default Freshness |
|---|---|---|
| Accredited Investor (AccreditedID) | Identity plus accredited-investor status aligned to SEC Rule 506(c); reveals only the binary fact of accreditation. | 24 hours |
| Proof of Funds | Funds at or above a specified threshold at a specified institution as of a specified timestamp; institution, account, and exact amount are not revealed. | 30 days |
| Source of Funds | Produced by a corridor risk scoring engine combining jurisdiction-risk flags, beneficial-ownership graph reachability, and bank-fingerprint correlation. | 90 days |
| Income Verification | Income at or above a specified threshold; employer, position, and exact income are not revealed. | 24 hours |
Bundle Envelope and Verification
Each constituent is itself a sealed receipt independently issued by the Byzantine Fault-Tolerant quorum. The bundle envelope references each constituent by hash and binds a per-constituent freshness timestamp, and the envelope as a whole is signed by the same quorum. A consuming party - a private-placement issuer, a real-estate agent, an immigration attorney, a large-remittance facilitator - verifies the bundle-level signature using only the kernel's published quorum public-key set, retrieves and verifies each constituent receipt individually, checks each constituent's freshness against policy, and accepts or rejects the bundle accordingly.
Freshness and Re-Attestation
Freshness policy is configurable per constituent, with defaults of 24 hours for AccreditedID and Income, 30 days for Proof of Funds, and 90 days for Source of Funds. A stale constituent automatically triggers a re-attestation request through the kernel, which produces a fresh constituent receipt and reissues the bundle envelope with updated timestamps - the holder does not need to re-prove facts that remain current.
Selective Disclosure
A consumer may verify only the constituents relevant to their use case rather than all four - an immigration attorney, for instance, may need only AccreditedID and Source of Funds, without the holder needing to present Proof of Funds or Income at all.
Prior Art Differentiation
| Approach | Multi-constituent bundle | Per-constituent freshness | Selective disclosure | Cryptographically quorum-verifiable |
|---|---|---|---|---|
| W3C VC / OpenID4VC | No (single attestation) | No | N/A | Varies |
| Onfido / Trulioo | Identity-only | No | No | Vendor-dependent |
| Plaid Income + Identity | No (separate products) | No | No | No |
| Mortgage doc packages | Yes, but opaque PDF | No | No | No |
| JIL Sovereign | Yes, four constituents | Yes | Yes | Yes |
The defensible combination is the specific four-constituent bundle bound at the envelope level with per-constituent freshness and selective disclosure - no prior single-attestation VC framework or identity-only reusability platform aggregates accreditation, funds, source of funds, and income together with corridor-risk scoring baked into the source-of-funds constituent.