Chapter 6 of 11 · 3 min read
One Identity Traced End to End
Narrative public and replay paths showing exactly what is included, excluded, and never inferred.
The ~WellbeingIdentity Rendering Architecture · v0.2 · edition history · Moses Sam Paul
Quick Answer
The public route is: identity reference → consent check → minimised public projection → Foundation → shared renderer. The replay route is: canonical slice → completed transition → replay input → owner-authorised replay projection → Value Log Replay. Neither route is a disguised export of a private identity record.
This is the core proof of the architecture. It is best understood as two short walks rather than one abstract flowchart.
Walkthrough one: a public profile
Someone reaches a Foundation profile. Foundation does not start by asking a renderer to retrieve a person. The identity reference is evaluated against the relevant consent purpose. If that purpose is active, a minimised public projection can be made available to Foundation. Foundation renders public-facing labels and consented summaries using the shared portrait. If the permission has expired or been revoked, the public view is no longer available.
Stable anchor identifies the intended subject.
Purpose and disclosure scope are evaluated.
A minimised, public-purpose view is assembled.
The renderer presents only the supplied public reading.
- Public display name
- Disclosed node labels
- Consented public summaries
- Projection metadata
- Private facets and evidence URLs
- Activity or audit records
- W transitions and individual values
- Performance routes and identity write capability
The critical distinction is practical, not rhetorical: excluded data is not shipped and hidden with CSS. It is absent from the public projection.
Walkthrough two: an owner-authorised replay
Replay begins with a canonical slice and a completed transition. The event’s settlement context is shaped into a replay input. An owner-authorised replay projection then lets Value Log Replay render the relevant reading, timeline controls, and any separate performance route. Selecting a ring for inspection pauses playback but does not alter canonical event data; timeline, scrubber, event-list, swipe, and keyboard navigation restore the intended Identity State focus.
Settled context is retained by Value Log.
A bounded replay input is prepared.
Owner-authorised reading for replay purpose.
Presentation and inspection, never event mutation.
- Slice reference and settlement time
- Pre-state, movement, and post-state descriptors
- Node label
- Separate Performance route where relevant
- Raw narrative and undisclosed facets
- Public publication permission
- Identity write capability
- Any claim that Pilot W is canonical WellbeingScore
No real identifier, history, private evidence, credential, or individual Pilot W value is required to understand either path. That is the point of the example.