I. Sociotechnical Purpose: Defending Against Infiltration & Bad-Jacketing

State counter-insurgency operations rely on forged communiqués, impersonation, and bad-jacketing. Conversely, corporate identity providers expose organizers to surveillance and de-platforming. KB-DID-001 solves both problems using self-hosted W3C did:web Decentralized Identifiers, Ed25519 digital signatures, and a Human-First Inverted Pyramid Verification Hierarchy.

II. Default-Private Individual Profiles & Immutable Collective Ledger History

• Default-Private Organizers (public_directory_opt_in = false): On ABCFederation.org, individual members (MEM-*) and Independent Catalysts (CAT-*) are unlisted by default so we never add to an organizer’s public attack surface. Unlisted organizers remain verifiable via targeted lookup in the Verification Portal whenever someone holds their ID or outreach phone number.
• Immutable Collective Membership History: Individual members cannot self-edit their membership history, induction dates, home/originating ABC, standing, or ratified mandates (MANDATE-*); those fields are read-only collective ledger records signed by the collective root key.
• Non-Custodial Private Vault (Users → Profile): Site administrators are programmatically blocked from viewing or overriding member passwords, passkeys, 5-word burnable sequences, rotating security questions, or duress codes.
• Single-Submission Contact Verification (CON-*): All Three-Spoke intake forms embed atomic single-submission CON-* mutual passphrase and return countersign verification.