note The five protocol layers compose left-to-right. Each is independently auditable.

open question Should reputation be tracked per-credential or per-issuer? Comments wanted.

caution Pre-specification. APIs and structures will change before v1.0.