Holder
The Holder is the party for whose benefit a Proof Protocol run was commissioned, identified by a public key and named in every record the run produces.
What it means
Every proof is for someone. The Holder answers the question “who asked for this test?”, and the key in every record says who.
The rules
- Every record names a Holder, by a stable identifier and a public key.
- The Holder is usually the Implementor whose system was tested. It may be the Issuer when no one else commissioned the run.
- The Holder is never the Provider.
- The Holder may add its own signature to a record’s envelope.
Where it matters
- The full canary content reveal goes to the Holder and to Content Verifiers, at Disclosure Level
holder_only. A Content Verifier is a party the Holder or Issuer authorizes in writing to check that each canary’s content matches its commitment and that each bad canary executes a real technique. - A Bundle aggregates records under one Holder.
holder_onlyrecords are encrypted to the Holder. See Disclosure Level.