发表机构
Tyche Institute（泰克研究所）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
针对EUDI钱包依赖方验证器缺乏独立可重运行证据的问题，提出17条规则决策模型、证据收据及36个合成交易，经108案例验证确定性，并建议RP作为被测系统的证据单元。
AI 中文摘要
欧洲数字身份钱包（EUDI Wallet）架构将实质性职责赋予依赖方：他们注册服务及预期用途，向钱包单元进行认证，验证演示文稿和信任锚，并做出基于风险的状态决策。钱包认证和新兴的功能一致性评估框架提供了日益结构化的钱包侧证据。一个不同的问题仍然存在：什么独立可重运行的证据表明，交易中使用的具体依赖方验证器版本执行了适用的请求、演示文稿和依赖决策控制？我们对现行法律、架构与参考框架（ARF）3.0.0、ETSI元数据、FCAF范围以及三个固定的开源验证器代码库进行了保证点审计。随后，我们设计了一个包含17条规则的研究配置文件、一份机器可读的证据收据以及36个冻结的合成交易。三个异构的研究作者实现（Python、JavaScript和jq）执行了108个案例，零预言机不匹配和零跨路径分歧。该实验确立了所提议决策模型的确定性和可实现性，而非产品一致性或认证。源代码检查发现，三个公共代码库中均存在实质性的协议验证机制，但没有一个单一的审计证据对象将RP注册和目的、确切的验证器/策略版本、交易裁决和下游属性使用结合起来。因此，我们提出了一个RP作为被测系统的证据单元，它补充而非取代钱包认证、注册和监管。一项预注册的26位指定专家普查已准备就绪，以测试内容有效性和治理可行性；招募工作等待适用的伦理/数据保护裁定。
英文摘要
The European Digital Identity Wallet (EUDI Wallet) architecture places material duties on relying parties: they register services and intended uses, authenticate to Wallet Units, validate presentations and trust anchors, and make risk-based status decisions. Wallet certification and the emerging Functional Conformance Assessment Framework provide increasingly structured wallet-side evidence. A different question remains: what independently rerunnable evidence shows that the concrete relying-party verifier version used in a transaction enforced the applicable request, presentation and reliance-decision controls? We conduct an assurance-locus audit of current law, Architecture and Reference Framework (ARF) 3.0.0, ETSI metadata, FCAF scope and three pinned open-source verifier codebases. We then design a 17-rule research profile, a machine-readable evidence receipt and 36 frozen synthetic transactions. Three heterogeneous study-authored implementations (Python, JavaScript and jq) execute 108 cases with zero oracle mismatches and zero cross-path disagreements. The experiment establishes determinism and implementability of the proposed decision model, not product conformance or certification. Source inspection finds substantial protocol-verification mechanisms in all three public codebases but no single audited evidence object joining RP registration and purpose, exact verifier/policy version, transaction verdict and downstream attribute use. We therefore propose an RP-as-system-under-test evidence unit that complements, rather than displaces, wallet certification, registration and supervision. A preregistered census of 26 appointed experts is prepared to test content validity and governance feasibility; recruitment awaits the applicable ethics/data-protection determination.
Comments11 pages, 1 figure, 2 tables. Technical pre-results version. Includes an ancillary reproducibility bundle with a 17-rule profile, 36 frozen vectors and 108 executions. The preregistered expert census has not opened and no human-participant response is reported
