confirmv

ConfirmV is an open-source framework and protocol for standardizing the creation, transport, and validation of confirmations for digital events and data. It provides a pluggable policy engine, cryptographic signing, and an auditable trail that can be integrated with identity, document management, and supply chain systems. The goal is interoperable, verifiable records across organizational boundaries while preserving data privacy and control.

Core components include a server that issues and stores confirmations, client SDKs, and a verification service that applies configurable policies to incoming confirmations. Confirmations are represented as compact, machine-readable objects with a data hash, a timestamp, a signer, and a cryptographic proof. The format supports batch and incremental confirmations and can leverage JSON Web Signatures and optional Merkle proofs.

Typical workflows involve an issuer creating a claim and issuing a confirmation, possibly binding it to a verifiable credential or data hash. A verifier retrieves the confirmation, validates the signature and timestamp, and enforces policy checks such as revocation status, freshness, and audience restrictions. On success, the system records the confirmation as verified and auditable.

ConfirmV aims to interoperate with broader verification ecosystems, including W3C Verifiable Credentials and Decentralized Identifiers, while balancing transparency with privacy through selective disclosure and scoped access. Originating as an internal project in the late 2010s, it was released as open source in the early 2020s and has since attracted community contributions and deployments. The project is commonly distributed under a permissive license such as Apache-2.0. Related concepts include verifiable credentials, digital signatures, and tamper-evident logging.