SD-JWT VC: the format of the agent mandate
SD-JWT VC (Selective Disclosure JSON Web Token, Verifiable Credential) is the credential format used by the EUDI wallet and the Swiss E-ID infrastructure. Individual claims are hashed and disclosed only when needed — the verifier sees the necessary fields, not the whole document.
How it works
The issuer signs a JWT in which every disclosable claim appears only as a hash. The holder keeps the plaintexts (disclosures); when presenting, it releases only the desired ones, optionally with a key-binding JWT as proof of possession.
At Mandact
Every mandate is an SD-JWT VC of type omp/mandate/1, bound to the agent's key (cnf). Limits such as amount_limit_per_action are disclosable — a shop sees its amount range, not the whole mandate.
Why this format
Because the state wallets speak it: whoever issues mandates in the same format can later anchor them to E-ID and EUDI identities without rebuilding the engine.
Status
Issued via the OID4VCI flow; issuer metadata at /.well-known/jwt-vc-issuer.