1. Choose Test Mode
Use a test API key and a deterministic fixture public ID. Test responses are non-authoritative and are never production credentials.
2. Verify a public ID
POST /api/v1/verify with a publicId. The response includes the canonical credential, policy result, claim scope, lifecycle, signature, and integrity hash.
3. Resolve the registry projection
GET /api/v1/registry/{publicId}. Compare publicId, tier, disclosure, lifecycle, signature, integrityHash, and claim count with the verification response.
4. Observe events and webhooks
GET /api/v1/events?publicId={publicId}. Every event contains a stable sequence, previous-event hash, event hash, and deterministic test signature.
5. Handle lifecycle
Do not treat a successful lookup as permission to rely. Inspect active, suspended, superseded, revoked, or expired state and follow any successor record.