boz1 / gxprofiles Goto Github PK

As we are using this to explore the requirements towards SSI we should definitly deactivate the "mainnet" profile deployment until we have enough clarity if the procedure is compliant with company specific regulations.

We have to read and check if the functionality implemented here adheres to the DID Core Specification and where some clarifications are to be comunicated due to the experience collected with the implementation. There is an interesting discussion here as well.

In order to merge changes to other repositories later on we should implement signed commits via DCO. We should make clear on how to use main and development. Normally development will in the future deploy to a staging instance of the service while main to the production instance.

We need to define policies for the deployed service at ASC(S e.V. and may be able to look at projects like EBSI to get inspiration.

We should explore the possibility to make a central entity that deployed the service (in this case e.g. ASC(S e.V.) to pay for the costs of creating the Verified Credentials. I think there are TZIP specifications for certain "proxies" to to this. Think about a possible missuse.