420 Identity user guide

Users can manage profile metadata/activity, nominate and accept controller transfers, link a primary .420 name, inspect credentials and reject credentials they do not accept.

Credential validity is dynamic. A credential must exist, be unrevoked, unexpired, not subject-rejected, have an active issuer and reference an active subject profile.

Issuer trust classes are COMMUNITY, VERIFIED, INSTITUTIONAL and SYSTEM; they classify issuer policy, not the universal truth of every claim.