What Wellbeing Identity is, and is not

The canonical Level 1 protocol path is ~WellbeingIdentity. Spec v0.7.0 defines it as a living state container rather than a measurement protocol. Its document-level identifier is a UUID-form did:iov:member:<uuid-v4>. The ~~~DID facet under ~~GivenIdentity is a compatibility projection of that document anchor; it is not the whole identity.

3.1 Eight canonical nodes

The identity contains eight locked Level 2 nodes:

• ~~GivenIdentity: facts and classifications substantially given, inherited, or legally recorded;
• ~~EarnedIdentity: education, certification, work experience, and portfolio claims;
• ~~RentedIdentity: handles and addresses held on external platforms;
• ~~Skills: hard skills, soft skills, level, evidence, and trajectory;
• ~~MoralCompass: virtues, values, and ethical boundaries;
• ~~Story: past, present, future, turning points, and vision;
• ~~IdentityState: ~~~WellbeingScore, history, and protocol convergence;
• ~~ConsentAndDisclosure: policy, selective disclosure, audience, grant, expiry, and revocation state.

The nodes provide a semantic anatomy. They do not create eight numerical components, and they are not summed into an IdentityScore. Unknown, not-applicable, withheld, and pending-validation are valid states. Completing an identity workshop means that required facets were consciously addressed; it does not force a disclosure, establish truth for every self-attestation, or impose a minimum WellbeingScore.

3.2 A state container, not a total person

No identity system completely represents a person. Wellbeing Identity is a governed, revisable container for specified aspects of identity and state. It can hold claims, references, histories, permissions, and projections. It cannot exhaust consciousness, relationship, culture, embodiment, or future possibility. The phrase “Wellbeing Identity” must not be read as “the person’s complete wellbeing” or “the person’s total identity.”

The distinction matters in sign-in. The relying application does not receive a person. It receives a bounded technical basis for a local relationship. In the current handoffs, that basis is primarily a short-lived reference to an existing identity binding. Separate projection interfaces govern any identity reading.

3.3 Identity is not intrinsic worth

The canonical ~~~WellbeingScore, where used, belongs under ~~IdentityState and carries method, time window, provenance, and policy metadata. The Spec does not assign universal component weights. Issuer-specific policies own calculations and validation modes. A score is therefore a contextual state projection, not a price, rank, moral verdict, credit score, entitlement, or measure of intrinsic human worth.

Sign in with Wellbeing Identity does not carry a score by default and does not require one to authenticate. The Value Log handoff does not transfer private score data. The ~Cortisol Checker~ handoff does not use an identity value to change its content analysis. These omissions protect the boundary between continuity and evaluation.

3.4 Private-to-public is not automatic

The Spec states a critical invariant: private measurements do not directly become public credentials. Performance may enter conditional community validation and later support a governed skill or earned-identity return. Private physiology or emotion does not silently become a public credential. Similarly, sign-in does not convert a private identity into a public profile. Word Wallet’s owner settings remain the publication authority, and every supported public field defaults private.