SigningIdentityConfiguration

data class SigningIdentityConfiguration(val recoveryProviders: List<IdentityRecoveryProvider> = emptyList(), val keyCustodians: List<IdentityKeyCustodian> = emptyList(), val authorization: SigningIdentityAuthorization = SigningIdentityAuthorization.WalletDefault, val policy: SigningIdentityKeyPolicy = SigningIdentityKeyPolicy.GeneralPurpose, val platform: PlatformKeyConfiguration = PlatformKeyConfiguration.Default, val alternativeAuthorizations: List<KeyUseAuthorizationPolicy> = emptyList(), val recoveryConfirmation: RecoveryConfirmation = RecoveryConfirmation.LocalAcceptance, val localRecoveryMaterial: LocalRecoveryMaterialRetention = LocalRecoveryMaterialRetention.Retain)

Identity configuration. Native recovery integrations are opt-in dependencies and registrations.

Constructors

constructor(recoveryProviders: List<IdentityRecoveryProvider> = emptyList(), keyCustodians: List<IdentityKeyCustodian> = emptyList(), authorization: SigningIdentityAuthorization = SigningIdentityAuthorization.WalletDefault, policy: SigningIdentityKeyPolicy = SigningIdentityKeyPolicy.GeneralPurpose, platform: PlatformKeyConfiguration = PlatformKeyConfiguration.Default, alternativeAuthorizations: List<KeyUseAuthorizationPolicy> = emptyList(), recoveryConfirmation: RecoveryConfirmation = RecoveryConfirmation.LocalAcceptance, localRecoveryMaterial: LocalRecoveryMaterialRetention = LocalRecoveryMaterialRetention.Retain)

val alternativeAuthorizations: List<KeyUseAuthorizationPolicy>

Explicit alternatives the host permits. Choosing weaker authorization always requires a different option.

Authorization inherited from the wallet configuration unless explicitly overridden.

Optional destinations receiving private-key custody; distinct from recovery providers.

Whether the additional local recovery record is retained after the required confirmation.

val platform: PlatformKeyConfiguration

Advanced settings for this device's native key backend.

Host/issuer constraints, not a declaration of EUDI or HAIP certification.

Minimum provider evidence required for activation and disposal of local recovery material.

Registered providers are trusted with recovery secrets. Empty means backup is disabled.