[API Proposal] CarrierAttestation

[hamr0]

Description

Identity data should not become a tradeable asset — that is this proposal's stance. The operator answers a boolean and keeps custody of the underlying fact; an aggregator carrying the query meters and bills but never reads identifiers, predicates, or answers. Concretely: CarrierAttestation proposes a horizontal profile — "attested windowed disclosure" — not a new
free-standing API. A predicate answer becomes a signed, nonce-bound, expiring boolean, never the raw value. CAMARA already has the precedent: POST/retrieve-age-band (SimSwap v2.1.0) coarsens a timestamp; GET/device-phone-number (NumberVerification v2.1.0) takes no request body, deriving the line from the token; kyc-age-verification ships a boolean age
predicate. The ask is to finish what those three started, catalog-wide. CarrierAttestation is filed only for the residual no existing API covers: agent-grade floor bundles and holder presentment.

Use cases

1. A bank authorizes a transfer on "unswapped ≥ 90d" without a timestamp.
2. An AI agent presents a floor-gated credential ("voice+data ∧ tenure ≥ 2y ∧ swapAge ≥ 90d") without the verifier learning the MSISDN.

Related to

None yet. Pull request to follow, adding the filled long template.

Supporting material

Author's own Apache 2.0 staging ground, not a CAMARA deliverable.
Repo: https://github.com/hamr0/justabit — proposal doc:
https://github.com/hamr0/justabit/blob/main/docs/product/camara-attested-windowed-disclosure.md
— PoC: https://github.com/hamr0/justabit/tree/main/poc — OpenAPI sketch:
https://github.com/hamr0/justabit/blob/main/spec/carrier-attestation.yaml

[hamr0]

Supporting material, as promised above. Both files are attached.

Revised proposal document (v2) — rescoped per the review on this
thread: use case 2 withdrawn, the signing layer moved to Commonalities,
and the Tenure API overlap acknowledged and corrected.
camara-attested-windowed-disclosure.md

OpenAPI sketch — illustrative, not normative. It shows the JWS
envelope shape and the threshold menu, not a proposed new API surface.
Attached with a .txt suffix because GitHub's uploader rejected the
.yaml extension; the content is unmodified YAML.
carrier-attestation.yaml.txt

Both files also render in context in the source repository, pinned to a
commit so they cannot drift:
https://github.com/hamr0/justabit/tree/9f7a49f6671bf41c63b342480f822f05e4dbdc8a/camara/v2

The Scope Enhancement itself is now open in Commonalities as
camaraproject/Commonalities#705, per the routing agreed above. This
issue and PR #331 remain the record of the original filing and of the
review that reshaped it.