@openvtc/trust-tasks 0.12.8 → 0.12.10

package/src/vtc/community/profile/show/0.1/payload.ts

@@ -13,10 +13,21 @@ export interface Ext {
   [k: string]: unknown | undefined;
 }
 export interface VTCCommunityProfileShowResponsePayload {
-  profile: CommunityProfile;
+  profile: CommunityProfileView;
   ext?: Ext;
 }
-export interface CommunityProfile {
+/**
+ * The community's profile as read, including the immutable `communityDid` an update cannot set.
+ */
+export interface CommunityProfileView {
+  /**
+   * The community's own DID — the identifier every credential it issues names as `issuer`, and the one a member's credential binds them to. Immutable: set when the community is created and not settable through an update.
+   */
+  communityDid: string;
+  /**
+   * When the community was created. Immutable, like `communityDid`.
+   */
+  createdAt?: string;
   name: string;
   description?: string;
   logoUrl?: string | null;
@@ -35,6 +46,28 @@ export interface CommunityProfile {
    * Trust-registry reachability. Populated on reads; not settable.
    */
   registryStatus?: "active" | "degraded";
+  personhood?: PersonhoodGovernance;
+}
+/**
+ * What this community's governance asserts about the personhood of its members.
+ */
+export interface PersonhoodGovernance {
+  /**
+   * Governance requires that members are real humans. Defaults to `false` when absent: a community that has not considered the question asserts nothing, which is the only safe default for a claim a verifier may rely on.
+   */
+  realHuman?: boolean;
+  /**
+   * Governance requires that each person holds at most one membership in **this** community. Per-community by definition — the glossary says "exactly one membership in that VTC" — so a single community can satisfy it without any network above it.
+   */
+  singleMembership?: boolean;
+  /**
+   * DIDs of the identity-verification providers whose credentials this community accepts as personhood evidence. A community that vets its own members in person lists its own community DID here — it is acting as its own IDVP, which §IDVC permits. An empty list means no list has been published, not that everything is accepted.
+   */
+  acceptedIdvps?: string[];
+  /**
+   * Where the governance framework these assertions refer to can be read.
+   */
+  governanceFrameworkUrl?: string | null;
 }
 
 /** Trust Task type URI. */
@@ -80,7 +113,8 @@ export const PAYLOAD_SCHEMA = {
       ],
       "properties": {
         "profile": {
-          "$ref": "#/$defs/CommunityProfile"
+          "$ref": "#/$defs/CommunityProfileView",
+          "description": "The community's profile as read, including the immutable `communityDid` an update cannot set."
         },
         "ext": {
           "$ref": "#/$defs/Ext"
@@ -97,16 +131,28 @@ export const PAYLOAD_SCHEMA = {
         "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
       }
     },
-    "CommunityProfile": {
-      "$anchor": "communityProfile",
-      "title": "CommunityProfile",
+    "CommunityProfileView": {
+      "$anchor": "communityProfileView",
+      "title": "CommunityProfileView",
       "type": "object",
       "additionalProperties": false,
+      "description": "A community profile **as read**: every member of CommunityProfile, plus the immutable identity a reader needs and an update must never set.\n\nCommunityProfile is the update-facing view and omits `communityDid` on purpose, so that a patch cannot re-point a community's identity. That is right for a payload and wrong for a response: a client holding a profile has no other way to learn which DID to verify that community's credentials against, and `community/profile/show` returning the update-facing view left the one member a consumer most needs undefined.\n\nSo reads get this and updates keep CommunityProfile. The split is the point — the immutability of `communityDid` is enforced by it being absent from the payload, not by prose asking implementers not to honour it.",
       "required": [
+        "communityDid",
         "name",
         "language"
       ],
       "properties": {
+        "communityDid": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The community's own DID — the identifier every credential it issues names as `issuer`, and the one a member's credential binds them to. Immutable: set when the community is created and not settable through an update."
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When the community was created. Immutable, like `communityDid`."
+        },
         "name": {
           "type": "string",
           "minLength": 1
@@ -155,6 +201,42 @@ export const PAYLOAD_SCHEMA = {
             "degraded"
           ],
           "description": "Trust-registry reachability. Populated on reads; not settable."
+        },
+        "personhood": {
+          "$ref": "#/$defs/PersonhoodGovernance",
+          "description": "What this community's governance asserts about the personhood of its members."
+        }
+      }
+    },
+    "PersonhoodGovernance": {
+      "$anchor": "personhoodGovernance",
+      "title": "PersonhoodGovernance",
+      "type": "object",
+      "additionalProperties": false,
+      "description": "A community's published position on personhood.\n\nDTG Credentials §Personhood Credentials places PHC status here rather than in the credential — \"PHC status is determined by governance and trust registries, not by credential structure\" — so a verifier deciding whether a VMC carries personhood weight reads this, not the credential's type array. §Governance Considerations item 1 makes the acceptable-IDVP list the community's to define and publish.\n\nEvery member is a declaration, not an enforcement: what a community actually accepts is decided by its own policy. Absent means the community has not published a position, which is not the same as asserting the negative.",
+      "properties": {
+        "realHuman": {
+          "type": "boolean",
+          "description": "Governance requires that members are real humans. Defaults to `false` when absent: a community that has not considered the question asserts nothing, which is the only safe default for a claim a verifier may rely on."
+        },
+        "singleMembership": {
+          "type": "boolean",
+          "description": "Governance requires that each person holds at most one membership in **this** community. Per-community by definition — the glossary says \"exactly one membership in that VTC\" — so a single community can satisfy it without any network above it."
+        },
+        "acceptedIdvps": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": "DIDs of the identity-verification providers whose credentials this community accepts as personhood evidence. A community that vets its own members in person lists its own community DID here — it is acting as its own IDVP, which §IDVC permits. An empty list means no list has been published, not that everything is accepted."
+        },
+        "governanceFrameworkUrl": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "Where the governance framework these assertions refer to can be read."
         }
       }
     }
@@ -176,7 +258,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
       ],
       "properties": {
         "profile": {
-          "$ref": "#/$defs/CommunityProfile"
+          "$ref": "#/$defs/CommunityProfileView",
+          "description": "The community's profile as read, including the immutable `communityDid` an update cannot set."
         },
         "ext": {
           "$ref": "#/$defs/Ext"
@@ -193,16 +276,28 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
       }
     },
-    "CommunityProfile": {
-      "$anchor": "communityProfile",
-      "title": "CommunityProfile",
+    "CommunityProfileView": {
+      "$anchor": "communityProfileView",
+      "title": "CommunityProfileView",
       "type": "object",
       "additionalProperties": false,
+      "description": "A community profile **as read**: every member of CommunityProfile, plus the immutable identity a reader needs and an update must never set.\n\nCommunityProfile is the update-facing view and omits `communityDid` on purpose, so that a patch cannot re-point a community's identity. That is right for a payload and wrong for a response: a client holding a profile has no other way to learn which DID to verify that community's credentials against, and `community/profile/show` returning the update-facing view left the one member a consumer most needs undefined.\n\nSo reads get this and updates keep CommunityProfile. The split is the point — the immutability of `communityDid` is enforced by it being absent from the payload, not by prose asking implementers not to honour it.",
       "required": [
+        "communityDid",
         "name",
         "language"
       ],
       "properties": {
+        "communityDid": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The community's own DID — the identifier every credential it issues names as `issuer`, and the one a member's credential binds them to. Immutable: set when the community is created and not settable through an update."
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When the community was created. Immutable, like `communityDid`."
+        },
         "name": {
           "type": "string",
           "minLength": 1
@@ -251,6 +346,42 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
             "degraded"
           ],
           "description": "Trust-registry reachability. Populated on reads; not settable."
+        },
+        "personhood": {
+          "$ref": "#/$defs/PersonhoodGovernance",
+          "description": "What this community's governance asserts about the personhood of its members."
+        }
+      }
+    },
+    "PersonhoodGovernance": {
+      "$anchor": "personhoodGovernance",
+      "title": "PersonhoodGovernance",
+      "type": "object",
+      "additionalProperties": false,
+      "description": "A community's published position on personhood.\n\nDTG Credentials §Personhood Credentials places PHC status here rather than in the credential — \"PHC status is determined by governance and trust registries, not by credential structure\" — so a verifier deciding whether a VMC carries personhood weight reads this, not the credential's type array. §Governance Considerations item 1 makes the acceptable-IDVP list the community's to define and publish.\n\nEvery member is a declaration, not an enforcement: what a community actually accepts is decided by its own policy. Absent means the community has not published a position, which is not the same as asserting the negative.",
+      "properties": {
+        "realHuman": {
+          "type": "boolean",
+          "description": "Governance requires that members are real humans. Defaults to `false` when absent: a community that has not considered the question asserts nothing, which is the only safe default for a claim a verifier may rely on."
+        },
+        "singleMembership": {
+          "type": "boolean",
+          "description": "Governance requires that each person holds at most one membership in **this** community. Per-community by definition — the glossary says \"exactly one membership in that VTC\" — so a single community can satisfy it without any network above it."
+        },
+        "acceptedIdvps": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": "DIDs of the identity-verification providers whose credentials this community accepts as personhood evidence. A community that vets its own members in person lists its own community DID here — it is acting as its own IDVP, which §IDVC permits. An empty list means no list has been published, not that everything is accepted."
+        },
+        "governanceFrameworkUrl": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "Where the governance framework these assertions refer to can be read."
         }
       }
     }

package/src/vtc/community/profile/update/0.1/payload.ts

@@ -14,12 +14,34 @@ export interface VTCCommunityProfileUpdatePayload {
    * Set the community's declared relationship-identifier default. See `CommunityProfile.relationshipIdentifierDefault` in the `vtc/_shared/0.1/community` schema. Omit to leave it unchanged.
    */
   relationshipIdentifierDefault?: "attributed" | "pairwise";
+  personhood?: PersonhoodGovernance;
   /**
    * Opaque community-defined extension bag (maintainer-capped).
    */
   extensions?: {};
   ext?: Ext;
 }
+/**
+ * Set the community's published personhood position. See `CommunityProfile.personhood` in the `vtc/_shared/0.1/community` schema. Replaces the whole object — a partial update would leave a verifier unable to tell an unset member from a cleared one. Omit to leave it unchanged.
+ */
+export interface PersonhoodGovernance {
+  /**
+   * Governance requires that members are real humans. Defaults to `false` when absent: a community that has not considered the question asserts nothing, which is the only safe default for a claim a verifier may rely on.
+   */
+  realHuman?: boolean;
+  /**
+   * Governance requires that each person holds at most one membership in **this** community. Per-community by definition — the glossary says "exactly one membership in that VTC" — so a single community can satisfy it without any network above it.
+   */
+  singleMembership?: boolean;
+  /**
+   * DIDs of the identity-verification providers whose credentials this community accepts as personhood evidence. A community that vets its own members in person lists its own community DID here — it is acting as its own IDVP, which §IDVC permits. An empty list means no list has been published, not that everything is accepted.
+   */
+  acceptedIdvps?: string[];
+  /**
+   * Where the governance framework these assertions refer to can be read.
+   */
+  governanceFrameworkUrl?: string | null;
+}
 /**
  * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
  */
@@ -27,14 +49,25 @@ export interface Ext {
   [k: string]: unknown | undefined;
 }
 export interface VTCCommunityProfileUpdateResponsePayload {
-  profile: CommunityProfile;
+  profile: CommunityProfileView;
   /**
    * Names of the profile members this update actually changed, in the wire spelling. Empty when the submitted values all matched what was already stored. Lets a caller distinguish a no-op from an applied change without diffing the returned profile against the one it sent.
    */
   fieldsChanged?: string[];
   ext?: Ext;
 }
-export interface CommunityProfile {
+/**
+ * The community's profile as read, including the immutable `communityDid` an update cannot set.
+ */
+export interface CommunityProfileView {
+  /**
+   * The community's own DID — the identifier every credential it issues names as `issuer`, and the one a member's credential binds them to. Immutable: set when the community is created and not settable through an update.
+   */
+  communityDid: string;
+  /**
+   * When the community was created. Immutable, like `communityDid`.
+   */
+  createdAt?: string;
   name: string;
   description?: string;
   logoUrl?: string | null;
@@ -53,6 +86,28 @@ export interface CommunityProfile {
    * Trust-registry reachability. Populated on reads; not settable.
    */
   registryStatus?: "active" | "degraded";
+  personhood?: PersonhoodGovernance1;
+}
+/**
+ * What this community's governance asserts about the personhood of its members.
+ */
+export interface PersonhoodGovernance1 {
+  /**
+   * Governance requires that members are real humans. Defaults to `false` when absent: a community that has not considered the question asserts nothing, which is the only safe default for a claim a verifier may rely on.
+   */
+  realHuman?: boolean;
+  /**
+   * Governance requires that each person holds at most one membership in **this** community. Per-community by definition — the glossary says "exactly one membership in that VTC" — so a single community can satisfy it without any network above it.
+   */
+  singleMembership?: boolean;
+  /**
+   * DIDs of the identity-verification providers whose credentials this community accepts as personhood evidence. A community that vets its own members in person lists its own community DID here — it is acting as its own IDVP, which §IDVC permits. An empty list means no list has been published, not that everything is accepted.
+   */
+  acceptedIdvps?: string[];
+  /**
+   * Where the governance framework these assertions refer to can be read.
+   */
+  governanceFrameworkUrl?: string | null;
 }
 
 /** Trust Task type URI. */
@@ -120,6 +175,10 @@ export const PAYLOAD_SCHEMA = {
       ],
       "description": "Set the community's declared relationship-identifier default. See `CommunityProfile.relationshipIdentifierDefault` in the `vtc/_shared/0.1/community` schema. Omit to leave it unchanged."
     },
+    "personhood": {
+      "$ref": "#/$defs/PersonhoodGovernance",
+      "description": "Set the community's published personhood position. See `CommunityProfile.personhood` in the `vtc/_shared/0.1/community` schema. Replaces the whole object — a partial update would leave a verifier unable to tell an unset member from a cleared one. Omit to leave it unchanged."
+    },
     "extensions": {
       "type": "object",
       "description": "Opaque community-defined extension bag (maintainer-capped)."
@@ -139,7 +198,8 @@ export const PAYLOAD_SCHEMA = {
       ],
       "properties": {
         "profile": {
-          "$ref": "#/$defs/CommunityProfile"
+          "$ref": "#/$defs/CommunityProfileView",
+          "description": "The community's profile as read, including the immutable `communityDid` an update cannot set."
         },
         "fieldsChanged": {
           "type": "array",
@@ -163,16 +223,28 @@ export const PAYLOAD_SCHEMA = {
         "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
       }
     },
-    "CommunityProfile": {
-      "$anchor": "communityProfile",
-      "title": "CommunityProfile",
+    "CommunityProfileView": {
+      "$anchor": "communityProfileView",
+      "title": "CommunityProfileView",
       "type": "object",
       "additionalProperties": false,
+      "description": "A community profile **as read**: every member of CommunityProfile, plus the immutable identity a reader needs and an update must never set.\n\nCommunityProfile is the update-facing view and omits `communityDid` on purpose, so that a patch cannot re-point a community's identity. That is right for a payload and wrong for a response: a client holding a profile has no other way to learn which DID to verify that community's credentials against, and `community/profile/show` returning the update-facing view left the one member a consumer most needs undefined.\n\nSo reads get this and updates keep CommunityProfile. The split is the point — the immutability of `communityDid` is enforced by it being absent from the payload, not by prose asking implementers not to honour it.",
       "required": [
+        "communityDid",
         "name",
         "language"
       ],
       "properties": {
+        "communityDid": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The community's own DID — the identifier every credential it issues names as `issuer`, and the one a member's credential binds them to. Immutable: set when the community is created and not settable through an update."
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When the community was created. Immutable, like `communityDid`."
+        },
         "name": {
           "type": "string",
           "minLength": 1
@@ -221,6 +293,42 @@ export const PAYLOAD_SCHEMA = {
             "degraded"
           ],
           "description": "Trust-registry reachability. Populated on reads; not settable."
+        },
+        "personhood": {
+          "$ref": "#/$defs/PersonhoodGovernance",
+          "description": "What this community's governance asserts about the personhood of its members."
+        }
+      }
+    },
+    "PersonhoodGovernance": {
+      "$anchor": "personhoodGovernance",
+      "title": "PersonhoodGovernance",
+      "type": "object",
+      "additionalProperties": false,
+      "description": "A community's published position on personhood.\n\nDTG Credentials §Personhood Credentials places PHC status here rather than in the credential — \"PHC status is determined by governance and trust registries, not by credential structure\" — so a verifier deciding whether a VMC carries personhood weight reads this, not the credential's type array. §Governance Considerations item 1 makes the acceptable-IDVP list the community's to define and publish.\n\nEvery member is a declaration, not an enforcement: what a community actually accepts is decided by its own policy. Absent means the community has not published a position, which is not the same as asserting the negative.",
+      "properties": {
+        "realHuman": {
+          "type": "boolean",
+          "description": "Governance requires that members are real humans. Defaults to `false` when absent: a community that has not considered the question asserts nothing, which is the only safe default for a claim a verifier may rely on."
+        },
+        "singleMembership": {
+          "type": "boolean",
+          "description": "Governance requires that each person holds at most one membership in **this** community. Per-community by definition — the glossary says \"exactly one membership in that VTC\" — so a single community can satisfy it without any network above it."
+        },
+        "acceptedIdvps": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": "DIDs of the identity-verification providers whose credentials this community accepts as personhood evidence. A community that vets its own members in person lists its own community DID here — it is acting as its own IDVP, which §IDVC permits. An empty list means no list has been published, not that everything is accepted."
+        },
+        "governanceFrameworkUrl": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "Where the governance framework these assertions refer to can be read."
         }
       }
     }
@@ -242,7 +350,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
       ],
       "properties": {
         "profile": {
-          "$ref": "#/$defs/CommunityProfile"
+          "$ref": "#/$defs/CommunityProfileView",
+          "description": "The community's profile as read, including the immutable `communityDid` an update cannot set."
         },
         "fieldsChanged": {
           "type": "array",
@@ -266,16 +375,28 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
       }
     },
-    "CommunityProfile": {
-      "$anchor": "communityProfile",
-      "title": "CommunityProfile",
+    "CommunityProfileView": {
+      "$anchor": "communityProfileView",
+      "title": "CommunityProfileView",
       "type": "object",
       "additionalProperties": false,
+      "description": "A community profile **as read**: every member of CommunityProfile, plus the immutable identity a reader needs and an update must never set.\n\nCommunityProfile is the update-facing view and omits `communityDid` on purpose, so that a patch cannot re-point a community's identity. That is right for a payload and wrong for a response: a client holding a profile has no other way to learn which DID to verify that community's credentials against, and `community/profile/show` returning the update-facing view left the one member a consumer most needs undefined.\n\nSo reads get this and updates keep CommunityProfile. The split is the point — the immutability of `communityDid` is enforced by it being absent from the payload, not by prose asking implementers not to honour it.",
       "required": [
+        "communityDid",
         "name",
         "language"
       ],
       "properties": {
+        "communityDid": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The community's own DID — the identifier every credential it issues names as `issuer`, and the one a member's credential binds them to. Immutable: set when the community is created and not settable through an update."
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When the community was created. Immutable, like `communityDid`."
+        },
         "name": {
           "type": "string",
           "minLength": 1
@@ -324,6 +445,42 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
             "degraded"
           ],
           "description": "Trust-registry reachability. Populated on reads; not settable."
+        },
+        "personhood": {
+          "$ref": "#/$defs/PersonhoodGovernance",
+          "description": "What this community's governance asserts about the personhood of its members."
+        }
+      }
+    },
+    "PersonhoodGovernance": {
+      "$anchor": "personhoodGovernance",
+      "title": "PersonhoodGovernance",
+      "type": "object",
+      "additionalProperties": false,
+      "description": "A community's published position on personhood.\n\nDTG Credentials §Personhood Credentials places PHC status here rather than in the credential — \"PHC status is determined by governance and trust registries, not by credential structure\" — so a verifier deciding whether a VMC carries personhood weight reads this, not the credential's type array. §Governance Considerations item 1 makes the acceptable-IDVP list the community's to define and publish.\n\nEvery member is a declaration, not an enforcement: what a community actually accepts is decided by its own policy. Absent means the community has not published a position, which is not the same as asserting the negative.",
+      "properties": {
+        "realHuman": {
+          "type": "boolean",
+          "description": "Governance requires that members are real humans. Defaults to `false` when absent: a community that has not considered the question asserts nothing, which is the only safe default for a claim a verifier may rely on."
+        },
+        "singleMembership": {
+          "type": "boolean",
+          "description": "Governance requires that each person holds at most one membership in **this** community. Per-community by definition — the glossary says \"exactly one membership in that VTC\" — so a single community can satisfy it without any network above it."
+        },
+        "acceptedIdvps": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": "DIDs of the identity-verification providers whose credentials this community accepts as personhood evidence. A community that vets its own members in person lists its own community DID here — it is acting as its own IDVP, which §IDVC permits. An empty list means no list has been published, not that everything is accepted."
+        },
+        "governanceFrameworkUrl": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "Where the governance framework these assertions refer to can be read."
         }
       }
     }

package/src/vtc/config/export/0.1/payload.ts

@@ -61,6 +61,7 @@ export interface CommunityProfileSnapshot {
    * The community's declared relationship-identifier default, as defined on `CommunityProfile` in the `vtc/_shared/0.1/community` schema. Carried in a config export so a restore reproduces the declaration rather than silently reverting it to the implementation default.
    */
   relationshipIdentifierDefault?: "attributed" | "pairwise";
+  personhood?: PersonhoodGovernance;
   /**
    * Opaque community-defined extension bag.
    */
@@ -70,6 +71,27 @@ export interface CommunityProfileSnapshot {
    */
   createdAt?: string;
 }
+/**
+ * The community's published personhood position, carried so an export restores it. Governance state, not runtime state — unlike `registryStatus`, which is deliberately absent here because reachability belongs to a running maintainer rather than to exported state.
+ */
+export interface PersonhoodGovernance {
+  /**
+   * Governance requires that members are real humans. Defaults to `false` when absent: a community that has not considered the question asserts nothing, which is the only safe default for a claim a verifier may rely on.
+   */
+  realHuman?: boolean;
+  /**
+   * Governance requires that each person holds at most one membership in **this** community. Per-community by definition — the glossary says "exactly one membership in that VTC" — so a single community can satisfy it without any network above it.
+   */
+  singleMembership?: boolean;
+  /**
+   * DIDs of the identity-verification providers whose credentials this community accepts as personhood evidence. A community that vets its own members in person lists its own community DID here — it is acting as its own IDVP, which §IDVC permits. An empty list means no list has been published, not that everything is accepted.
+   */
+  acceptedIdvps?: string[];
+  /**
+   * Where the governance framework these assertions refer to can be read.
+   */
+  governanceFrameworkUrl?: string | null;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/config/export/0.1" as const;
@@ -224,6 +246,10 @@ export const PAYLOAD_SCHEMA = {
           ],
           "description": "The community's declared relationship-identifier default, as defined on `CommunityProfile` in the `vtc/_shared/0.1/community` schema. Carried in a config export so a restore reproduces the declaration rather than silently reverting it to the implementation default."
         },
+        "personhood": {
+          "$ref": "#/$defs/PersonhoodGovernance",
+          "description": "The community's published personhood position, carried so an export restores it. Governance state, not runtime state — unlike `registryStatus`, which is deliberately absent here because reachability belongs to a running maintainer rather than to exported state."
+        },
         "extensions": {
           "type": "object",
           "description": "Opaque community-defined extension bag."
@@ -234,6 +260,38 @@ export const PAYLOAD_SCHEMA = {
           "description": "When the community was created. Provenance only — an import never writes it."
         }
       }
+    },
+    "PersonhoodGovernance": {
+      "$anchor": "personhoodGovernance",
+      "title": "PersonhoodGovernance",
+      "type": "object",
+      "additionalProperties": false,
+      "description": "A community's published position on personhood.\n\nDTG Credentials §Personhood Credentials places PHC status here rather than in the credential — \"PHC status is determined by governance and trust registries, not by credential structure\" — so a verifier deciding whether a VMC carries personhood weight reads this, not the credential's type array. §Governance Considerations item 1 makes the acceptable-IDVP list the community's to define and publish.\n\nEvery member is a declaration, not an enforcement: what a community actually accepts is decided by its own policy. Absent means the community has not published a position, which is not the same as asserting the negative.",
+      "properties": {
+        "realHuman": {
+          "type": "boolean",
+          "description": "Governance requires that members are real humans. Defaults to `false` when absent: a community that has not considered the question asserts nothing, which is the only safe default for a claim a verifier may rely on."
+        },
+        "singleMembership": {
+          "type": "boolean",
+          "description": "Governance requires that each person holds at most one membership in **this** community. Per-community by definition — the glossary says \"exactly one membership in that VTC\" — so a single community can satisfy it without any network above it."
+        },
+        "acceptedIdvps": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": "DIDs of the identity-verification providers whose credentials this community accepts as personhood evidence. A community that vets its own members in person lists its own community DID here — it is acting as its own IDVP, which §IDVC permits. An empty list means no list has been published, not that everything is accepted."
+        },
+        "governanceFrameworkUrl": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "Where the governance framework these assertions refer to can be read."
+        }
+      }
     }
   }
 } as const;
@@ -362,6 +420,10 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           ],
           "description": "The community's declared relationship-identifier default, as defined on `CommunityProfile` in the `vtc/_shared/0.1/community` schema. Carried in a config export so a restore reproduces the declaration rather than silently reverting it to the implementation default."
         },
+        "personhood": {
+          "$ref": "#/$defs/PersonhoodGovernance",
+          "description": "The community's published personhood position, carried so an export restores it. Governance state, not runtime state — unlike `registryStatus`, which is deliberately absent here because reachability belongs to a running maintainer rather than to exported state."
+        },
         "extensions": {
           "type": "object",
           "description": "Opaque community-defined extension bag."
@@ -372,6 +434,38 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           "description": "When the community was created. Provenance only — an import never writes it."
         }
       }
+    },
+    "PersonhoodGovernance": {
+      "$anchor": "personhoodGovernance",
+      "title": "PersonhoodGovernance",
+      "type": "object",
+      "additionalProperties": false,
+      "description": "A community's published position on personhood.\n\nDTG Credentials §Personhood Credentials places PHC status here rather than in the credential — \"PHC status is determined by governance and trust registries, not by credential structure\" — so a verifier deciding whether a VMC carries personhood weight reads this, not the credential's type array. §Governance Considerations item 1 makes the acceptable-IDVP list the community's to define and publish.\n\nEvery member is a declaration, not an enforcement: what a community actually accepts is decided by its own policy. Absent means the community has not published a position, which is not the same as asserting the negative.",
+      "properties": {
+        "realHuman": {
+          "type": "boolean",
+          "description": "Governance requires that members are real humans. Defaults to `false` when absent: a community that has not considered the question asserts nothing, which is the only safe default for a claim a verifier may rely on."
+        },
+        "singleMembership": {
+          "type": "boolean",
+          "description": "Governance requires that each person holds at most one membership in **this** community. Per-community by definition — the glossary says \"exactly one membership in that VTC\" — so a single community can satisfy it without any network above it."
+        },
+        "acceptedIdvps": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": "DIDs of the identity-verification providers whose credentials this community accepts as personhood evidence. A community that vets its own members in person lists its own community DID here — it is acting as its own IDVP, which §IDVC permits. An empty list means no list has been published, not that everything is accepted."
+        },
+        "governanceFrameworkUrl": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "Where the governance framework these assertions refer to can be read."
+        }
+      }
     }
   }
 } as const;