@algovoi/kyc-passport

algovoi-kyc-passport

Map a Jumio or Sumsub identity-verification result into a content-addressed, no-PII AlgoVoi agent passport_ref. Open tier, Apache-2.0.

Keystone Enabled — discovered by the AlgoVoi keystone control panel. Verify it yourself: pip install algovoi-keystone-control && keystone-verify algovoi-kyc-passport → PASS.

A passport_ref is "sha256:" + SHA-256(JCS({agent_id, issuer, scope, validity_window})) — byte-identical to the frozen public conformance vector agent_passport_lite_v1 and to the AlgoVoi commercial passport tier. No name, document number, face image, or other PII ever enters the reference.

from algovoi_kyc_passport import from_jumio, from_sumsub, subject_ref, tamper_detected

# Jumio KYX result -> passport_ref (only a PASSED decision yields one)
ref = from_jumio(
    agent_id=subject_ref("jumio", "acct-9931"),     # content-addressed, no PII
    decision="PASSED",
    capabilities=["extraction", "liveness", "watchlistScreening"],
    valid_from="2026-06-30", valid_until="2027-06-30",
)

# Sumsub applicant review -> passport_ref (only a GREEN review yields one)
ref = from_sumsub(
    agent_id=subject_ref("sumsub", "applicant-771"),
    review_answer="GREEN",
    checks=["identity", "selfie"],
    valid_from="2026-06-30", valid_until="2027-06-30",
    level_name="basic-kyc",
)

# Anyone can recompute and detect tampering with no AlgoVoi service:
tamper_detected(ref, agent_id, issuer, scope, validity_window)   # -> False if intact

Fail-closed: from_jumio issues a passport only when the Jumio decision.type is PASSED; from_sumsub only when the Sumsub reviewResult.reviewAnswer is GREEN. Any other verdict raises PassportRefError.

What the open tier does and does not do

	Open tier (this package)	Commercial tier
Content-addressed passport_ref	yes	yes
Vendor mapping (Jumio / Sumsub)	yes	yes
Tamper detection	yes	yes
PQC-signed passport	—	yes
Revocation + continuity checks	—	yes
CCC evidence ingest	—	yes
Keystone binding (passport → mandate → decision)	—	yes

This package computes and verifies the reference. Proving the passport's lifecycle (signed, not revoked, bound to a mandate and decision) is the commercial keystone.

License

Apache-2.0. Copyright AlgoVoi.