Identity & Trust
Learn what an anchor is, what identifies it, how realms admit it and which checks every peer makes.
- AnchorsEvery machine on a VeilNet network runs an anchor. Learn what an anchor does, how it carries a packet and how to inspect one.
- IdentityAn anchor's identity is its own post-quantum public key. Learn how the AnchorID and addresses come from it, how the anchor signs, and how it stores the key.
- Realms and DelegationRealms admit anchors with credentials and delegate sub-realms to other keys. Learn how far delegation can go, and what happens to the tree when a delegation expires.
- Powers and BoundariesA credential can grant powers over the members of its realm, and the tree decides what passes between realms. Learn who holds each power and where each rule applies.
- TaintsTaints divide a realm into compartments. Two anchors exchange data only if one carries every taint the other does.
- AdmissionTwo anchors admit each other in three stages before they exchange anything. The stages are a knock, a TLS 1.3 handshake and a post-quantum proof of membership tied to the session.