signet-protocol 1.11.0 → 1.11.2

package/examples/full-flow.ts

@@ -0,0 +1,260 @@
+// Signet Protocol — Full Flow Example
+// Demonstrates all 4 tiers, Signet IQ, policy enforcement, and verifier lifecycle
+
+import {
+  generateKeyPair,
+  // Credentials
+  createSelfDeclaredCredential,
+  createPeerVouchedCredential,
+  createProfessionalCredential,
+  createChildSafetyCredential,
+  verifyCredential,
+  parseCredential,
+  // Vouches
+  createVouch,
+  hasEnoughVouches,
+  // Signet IQ
+  computeTrustScore,
+  formatTrustDisplay,
+  // Policies
+  createPolicy,
+  PolicyChecker,
+  // Verifiers
+  createVerifierCredential,
+  checkCrossVerification,
+  isVerifierRevoked,
+  // Challenges
+  createChallenge,
+  createRevocation,
+  // Merkle
+  MerkleTree,
+  verifySelectiveDisclosure,
+} from '../src/index.js';
+
+async function main() {
+  console.log('=== Signet Protocol — Full Flow Demo ===\n');
+
+  // --- 1. Generate identities ---
+  const alice = generateKeyPair();    // Regular user
+  const bob = generateKeyPair();      // Regular user
+  const carol = generateKeyPair();    // Regular user
+  const dave = generateKeyPair();     // Regular user
+  const emma = generateKeyPair();     // Parent
+  const lawyer = generateKeyPair();   // Professional verifier (solicitor)
+  const doctor = generateKeyPair();   // Professional verifier (doctor)
+  const notary = generateKeyPair();   // Professional verifier (notary)
+  const operator = generateKeyPair(); // Community operator
+
+  console.log('--- Tier 1: Self-Declared ---');
+  const aliceSelfCred = await createSelfDeclaredCredential(alice.privateKey);
+  const verification = await verifyCredential(aliceSelfCred);
+  console.log(`Alice self-declares: sig=${verification.signatureValid}, valid=${verification.structureValid}`);
+  console.log(`  Tier: ${parseCredential(aliceSelfCred)!.tier}, Type: ${parseCredential(aliceSelfCred)!.type}\n`);
+
+  // --- 2. Web-of-Trust Vouching (Tier 2) ---
+  console.log('--- Tier 2: Web-of-Trust ---');
+
+  // Bob, Carol, Dave vouch for Alice (met at a Bitcoin meetup)
+  const vouches = await Promise.all([
+    createVouch(bob.privateKey, {
+      subjectPubkey: alice.publicKey,
+      method: 'in-person',
+      context: 'bitcoin-meetup-london',
+      voucherTier: 2,
+      voucherScore: 60,
+    }),
+    createVouch(carol.privateKey, {
+      subjectPubkey: alice.publicKey,
+      method: 'in-person',
+      context: 'bitcoin-meetup-london',
+      voucherTier: 2,
+      voucherScore: 55,
+    }),
+    createVouch(dave.privateKey, {
+      subjectPubkey: alice.publicKey,
+      method: 'online',
+      voucherTier: 2,
+      voucherScore: 45,
+    }),
+  ]);
+
+  const enough = hasEnoughVouches(vouches, alice.publicKey);
+  console.log(`Alice has enough vouches for Tier 2: ${enough}`); // true (3 vouches, threshold = 3)
+
+  // Issue Tier 2 credential
+  const aliceTier2 = await createPeerVouchedCredential(operator.privateKey, alice.publicKey);
+  console.log(`Alice promoted to Tier 2: ${parseCredential(aliceTier2)!.tier}\n`);
+
+  // --- 3. Professional Verifier Setup ---
+  console.log('--- Verifier Registration ---');
+
+  const lawyerCred = await createVerifierCredential(lawyer.privateKey, {
+    profession: 'solicitor',
+    jurisdiction: 'UK',
+    licenceHash: 'sha256_of_sra_number_12345',
+    professionalBody: 'Law Society of England and Wales',
+    statement: 'Available for Signet identity verification in London',
+  });
+
+  const doctorCred = await createVerifierCredential(doctor.privateKey, {
+    profession: 'doctor',
+    jurisdiction: 'UK',
+    licenceHash: 'sha256_of_gmc_number_67890',
+    professionalBody: 'General Medical Council',
+  });
+
+  const notaryCred = await createVerifierCredential(notary.privateKey, {
+    profession: 'notary',
+    jurisdiction: 'UK',
+    licenceHash: 'sha256_of_notary_commission_11111',
+    professionalBody: 'Notaries Society',
+  });
+
+  // Cross-verify: doctor and notary both vouch for the lawyer (2 different professions)
+  const crossVouches = await Promise.all([
+    createVouch(doctor.privateKey, {
+      subjectPubkey: lawyer.publicKey,
+      method: 'in-person',
+      voucherTier: 3,
+      voucherScore: 90,
+    }),
+    createVouch(notary.privateKey, {
+      subjectPubkey: lawyer.publicKey,
+      method: 'in-person',
+      voucherTier: 3,
+      voucherScore: 85,
+    }),
+  ]);
+
+  const lawyerActivation = checkCrossVerification(
+    lawyer.publicKey,
+    crossVouches,
+    [lawyerCred, doctorCred, notaryCred]
+  );
+  console.log(`Lawyer activated: ${lawyerActivation.activated}`);
+  console.log(`  Vouches: ${lawyerActivation.vouchCount}, Professions: ${lawyerActivation.professions.join(', ')}\n`);
+
+  // --- 4. Professional Verification (Tier 3) ---
+  console.log('--- Tier 3: Professional Verification ---');
+
+  const aliceTier3 = await createProfessionalCredential(lawyer.privateKey, alice.publicKey, {
+    profession: 'solicitor',
+    jurisdiction: 'UK',
+    proofBlob: '(ZKP proof would go here)',
+  });
+
+  const tier3Result = await verifyCredential(aliceTier3);
+  console.log(`Alice Tier 3: sig=${tier3Result.signatureValid}, valid=${tier3Result.structureValid}`);
+  console.log(`  Parsed: tier=${parseCredential(aliceTier3)!.tier}, profession=${parseCredential(aliceTier3)!.profession}\n`);
+
+  // --- 5. Child Safety (Tier 4) ---
+  console.log('--- Tier 4: Child Safety ---');
+
+  const emmaTier4 = await createChildSafetyCredential(lawyer.privateKey, emma.publicKey, {
+    profession: 'solicitor',
+    jurisdiction: 'UK',
+    ageRange: '8-12',
+    proofBlob: '(Bulletproof range proof would go here)',
+  });
+
+  const tier4Result = await verifyCredential(emmaTier4);
+  const parsed4 = parseCredential(emmaTier4)!;
+  console.log(`Emma Tier 4: sig=${tier4Result.signatureValid}, valid=${tier4Result.structureValid}`);
+  console.log(`  Scope: ${parsed4.scope}, Age range: ${parsed4.ageRange}\n`);
+
+  // --- 6. Signet IQ ---
+  console.log('--- Signet IQ ---');
+
+  const oneYearAgo = Math.floor(Date.now() / 1000) - 365 * 24 * 60 * 60;
+  const aliceScore = computeTrustScore(
+    alice.publicKey,
+    [aliceSelfCred, aliceTier2, aliceTier3],
+    vouches,
+    oneYearAgo
+  );
+
+  console.log(formatTrustDisplay(aliceScore));
+  console.log();
+
+  // --- 7. Selective Disclosure (Merkle) ---
+  console.log('--- Selective Disclosure ---');
+
+  const tree = new MerkleTree({
+    tier: '3',
+    type: 'professional',
+    scope: 'adult',
+    profession: 'solicitor',
+    jurisdiction: 'UK',
+    method: 'in-person-id',
+    subject: alice.publicKey,
+  });
+
+  // Alice only reveals tier and jurisdiction
+  const disclosure = tree.disclose(['tier', 'jurisdiction']);
+  console.log(`Merkle root: ${tree.getRoot().slice(0, 16)}...`);
+  console.log(`Revealed: ${JSON.stringify(disclosure.revealedAttributes)}`);
+  console.log(`Disclosure valid: ${verifySelectiveDisclosure(disclosure)}\n`);
+
+  // --- 8. Community Policy ---
+  console.log('--- Policy Enforcement ---');
+
+  const policyEvent = await createPolicy(operator.privateKey, {
+    communityId: 'safe-kids-learning',
+    adultMinTier: 3,
+    childMinTier: 4,
+    enforcement: 'both',
+    minScore: 50,
+    modMinTier: 3,
+    verifierBond: 100000,
+    revocationThreshold: 5,
+    description: 'Maximum safety space for children',
+  });
+
+  const checker = new PolicyChecker(policyEvent);
+
+  console.log(`Alice (Tier 3, score ${aliceScore.score}) as adult: ${checker.checkAdult(3, aliceScore.score).allowed}`);
+  console.log(`Emma (Tier 4, score 60) as child account: ${checker.checkChild(4, 60).allowed}`);
+  console.log(`Bob (Tier 2, score 40) as adult: ${checker.checkAdult(2, 40).allowed}`);
+
+  const bobResult = checker.checkAdult(2, 40);
+  if (!bobResult.allowed) {
+    console.log(`  Reason: ${bobResult.reason}`);
+  }
+  console.log();
+
+  // --- 9. Challenge & Revocation ---
+  console.log('--- Challenge & Revocation ---');
+
+  const rogue = generateKeyPair();
+  const rogueCred = await createVerifierCredential(rogue.privateKey, {
+    profession: 'solicitor',
+    jurisdiction: 'UK',
+    licenceHash: 'fake_licence',
+    professionalBody: 'Law Society',
+  });
+
+  const challenge = await createChallenge(alice.privateKey, {
+    verifierPubkey: rogue.publicKey,
+    reason: 'registry-mismatch',
+    evidenceType: 'registry-screenshot',
+    reporterTier: 3,
+    evidence: 'SRA lookup: licence number not found in registry',
+  });
+  console.log(`Challenge filed against rogue verifier`);
+
+  const revocation = await createRevocation(operator.privateKey, {
+    verifierPubkey: rogue.publicKey,
+    challengeEventId: challenge.id,
+    confirmations: 7,
+    bondAction: 'slashed',
+    scope: 'full',
+    effectiveAt: Math.floor(Date.now() / 1000),
+    summary: 'Licence number confirmed fake via SRA registry check',
+  });
+  console.log(`Revocation issued: ${isVerifierRevoked(rogue.publicKey, [revocation])}`);
+  console.log();
+
+  console.log('=== Demo Complete ===');
+}
+
+main().catch(console.error);

package/examples/jurisdictions/brazil-lawyer.ts

@@ -0,0 +1,186 @@
+// Signet Protocol — Brazilian Lawyer Example
+// Demonstrates identity verification under LGPD (Lei Geral de Protecao de Dados)
+// Jurisdiction: Brazil (BR)
+// Profession: Lawyer regulated by the OAB (Ordem dos Advogados do Brasil)
+// Features: LGPD compliance, digital credential support, child protection under Art. 14
+
+import {
+  generateKeyPair,
+  getJurisdiction,
+  getProfessionalBodies,
+  createProfessionalCredential,
+  createChildSafetyCredential,
+  verifyCredential,
+  parseCredential,
+  checkCredentialCompliance,
+  checkChildCompliance,
+  getConsentRequirements,
+  getRetentionGuidance,
+  setLanguage,
+  t,
+  getTierDescription,
+  formatLocalizedTrustScore,
+  computeTrustScore,
+} from '../../src/index.js';
+
+async function main() {
+  console.log('=== Protocolo Signet — Verificacao de Advogado Brasileiro ===\n');
+
+  // Set language to Portuguese
+  setLanguage('pt');
+
+  // --- 1. Jurisdiction and OAB lookup ---
+  const br = getJurisdiction('BR');
+  if (!br) throw new Error('BR jurisdiction not found');
+
+  console.log(`Jurisdicao: ${br.name} (${br.nameLocal})`);
+  console.log(`Sistema juridico: ${br.legalSystem}`);
+  console.log(`Protecao de dados: ${br.dataProtection.name} - ${br.dataProtection.fullName}`);
+  console.log(`Autoridade supervisora: ${br.dataProtection.supervisoryAuthority}`);
+  if (br.dataProtection.notes) {
+    console.log(`Nota: ${br.dataProtection.notes}`);
+  }
+  console.log();
+
+  // Look up the OAB — notably, it issues digital credentials via ICP-Brasil
+  const legalBodies = getProfessionalBodies('BR', 'legal');
+  console.log('Entidades profissionais juridicas no Brasil:');
+  for (const body of legalBodies) {
+    console.log(`  - ${body.name}`);
+    if (body.nameEn) console.log(`    (${body.nameEn})`);
+    console.log(`    Website: ${body.website}`);
+    console.log(`    Registro publico: ${body.hasPublicRegister}`);
+    if (body.registerUrl) {
+      console.log(`    URL do registro: ${body.registerUrl}`);
+    }
+    // OAB issues digital certificates via ICP-Brasil PKI
+    console.log(`    Credenciais digitais: ${body.issuesDigitalCredentials}`);
+    if (body.notes) {
+      console.log(`    Nota: ${body.notes}`);
+    }
+  }
+  console.log();
+
+  // --- 2. Generate identities ---
+  const advogado = generateKeyPair();   // The verifying lawyer (advogado)
+  const subject = generateKeyPair();    // Person being verified
+  const parent = generateKeyPair();     // Parent (for child credential)
+
+  // --- 3. Create Tier 3 credential (Portuguese output) ---
+  console.log(`--- ${t('tier_3')}: ${t('credential_professional')} ---`);
+  console.log(getTierDescription(3));
+  console.log();
+
+  const credential = await createProfessionalCredential(
+    advogado.privateKey,
+    subject.publicKey,
+    {
+      profession: 'lawyer',
+      jurisdiction: 'BR',
+    }
+  );
+
+  const verification = await verifyCredential(credential);
+  const parsed = parseCredential(credential)!;
+
+  console.log(`${t('credential_professional')}: ${t('status_valid')}`);
+  console.log(`  ${t('msg_signature_valid')}`);
+  console.log(`  Tier: ${parsed.tier}, Profissao: ${parsed.profession}`);
+  console.log(`  Jurisdicao: ${parsed.jurisdiction}`);
+  console.log();
+
+  // --- 4. LGPD compliance check ---
+  // Brazil's LGPD is modelled on the GDPR and requires explicit consent.
+  // ICP-Brasil provides the PKI infrastructure for digital signatures.
+  console.log('--- Verificacao de conformidade LGPD ---');
+  const compliance = checkCredentialCompliance(credential, 'BR');
+  console.log(`Em conformidade: ${compliance.compliant}`);
+
+  for (const issue of compliance.issues) {
+    const prefix = issue.severity === 'error' ? '[ERRO]'
+      : issue.severity === 'warning' ? '[AVISO]'
+      : '[INFO]';
+    console.log(`  ${prefix} ${issue.message}`);
+    console.log(`    Regulamento: ${issue.regulation}`);
+    if (issue.remediation) {
+      console.log(`    Acao: ${issue.remediation}`);
+    }
+  }
+  console.log();
+
+  // --- 5. LGPD consent requirements ---
+  // LGPD treats biometric data as sensitive personal data requiring specific legal basis.
+  console.log('--- Requisitos de consentimento ---');
+  const consent = getConsentRequirements('BR');
+  console.log(`Consentimento explicito: ${consent.requiresExplicitConsent}`);
+  console.log(`Idade de consentimento digital: ${consent.consentAge}`);
+  console.log(`Categorias de dados: ${consent.dataCategories.join(', ')}`);
+  if (consent.specialCategories.length > 0) {
+    console.log(`Categorias especiais: ${consent.specialCategories.join(', ')}`);
+  }
+  if (consent.notes) {
+    console.log(`Nota: ${consent.notes}`);
+  }
+  console.log();
+
+  // --- 6. Child protection under LGPD Art. 14 ---
+  // LGPD Art. 14 provides specific rules for processing children's data.
+  // Brazil's digital consent age is 12 (one of the lowest globally).
+  // The ECA (Estatuto da Crianca e do Adolescente) provides additional protections.
+  console.log('--- Protecao infantil — LGPD Art. 14 + ECA ---');
+
+  const childCredential = await createChildSafetyCredential(
+    advogado.privateKey,
+    parent.publicKey,
+    {
+      profession: 'lawyer',
+      jurisdiction: 'BR',
+      ageRange: '8-12',
+    }
+  );
+
+  const childVerification = await verifyCredential(childCredential);
+  const childParsed = parseCredential(childCredential)!;
+
+  console.log(`${t('credential_professional_child')}: ${t('status_valid')}`);
+  console.log(`  Escopo: ${childParsed.scope}, Faixa etaria: ${childParsed.ageRange}`);
+  console.log(`  Assinatura valida: ${childVerification.signatureValid}`);
+  console.log();
+
+  // Check child compliance for a 10-year-old
+  console.log('--- Conformidade infantil (idade 10, BR) ---');
+  const childCompliance = checkChildCompliance(10, 'BR');
+  console.log(`Em conformidade: ${childCompliance.compliant}`);
+  console.log(`Idade minima de consentimento: ${childCompliance.minConsentAge}`);
+  console.log(`Maioridade: ${childCompliance.ageOfMajority}`);
+  console.log(`Consentimento parental necessario: ${childCompliance.requiresParentalConsent}`);
+
+  for (const issue of childCompliance.issues) {
+    const prefix = issue.severity === 'error' ? '[ERRO]'
+      : issue.severity === 'warning' ? '[AVISO]'
+      : '[INFO]';
+    console.log(`  ${prefix} ${issue.message}`);
+  }
+  console.log();
+
+  // --- 7. Data retention ---
+  console.log('--- Retencao de dados ---');
+  const retention = getRetentionGuidance('BR');
+  console.log(`Orientacao: ${retention.guidance}`);
+  console.log(`Regulamento: ${retention.regulation}`);
+  console.log();
+
+  // --- 8. Signet IQ (Portuguese output) ---
+  console.log(`--- ${t('msg_signet_iq')} ---`);
+  const trustScore = computeTrustScore(
+    subject.publicKey,
+    [credential],
+    [],
+    Math.floor(Date.now() / 1000) - 2 * 365 * 24 * 60 * 60
+  );
+  console.log(formatLocalizedTrustScore(trustScore.score));
+
+  console.log('\n=== Exemplo de Advogado Brasileiro Concluido ===');
+}
+
+main().catch(console.error);

package/examples/jurisdictions/eu-doctor.ts

@@ -0,0 +1,160 @@
+// Signet Protocol — German Doctor (EU) Example
+// Demonstrates identity verification under GDPR with cross-border EU transfers
+// Jurisdiction: Germany (DE)
+// Profession: Doctor (Arzt) regulated by the Bundesaerztekammer
+// Features: GDPR compliance, eIDAS recognition, cross-border to France
+
+import {
+  generateKeyPair,
+  getJurisdiction,
+  getProfessionalBodies,
+  getMutualRecognitionPartners,
+  createProfessionalCredential,
+  verifyCredential,
+  parseCredential,
+  checkCredentialCompliance,
+  checkCrossBorderCompliance,
+  getConsentRequirements,
+  getRetentionGuidance,
+  setLanguage,
+  t,
+  getTierDescription,
+  formatLocalizedTrustScore,
+  computeTrustScore,
+} from '../../src/index.js';
+
+async function main() {
+  console.log('=== Signet-Protokoll — Deutsche Arztverifizierung ===\n');
+
+  // Set language to German
+  setLanguage('de');
+
+  // --- 1. Jurisdiction and professional body lookup ---
+  const de = getJurisdiction('DE');
+  if (!de) throw new Error('DE jurisdiction not found');
+
+  console.log(`Gerichtsbarkeit: ${de.name} (${de.nameLocal})`);
+  console.log(`Rechtssystem: ${de.legalSystem}`);
+  console.log(`Datenschutz: ${de.dataProtection.name}`);
+  console.log(`Aufsichtsbehoerde: ${de.dataProtection.supervisoryAuthority}`);
+  console.log(`Hinweis: ${de.dataProtection.notes}`);
+  console.log();
+
+  // Look up the Bundesaerztekammer (German Medical Association)
+  const medicalBodies = getProfessionalBodies('DE', 'medical');
+  console.log('Medizinische Berufskoerperschaften in DE:');
+  for (const body of medicalBodies) {
+    console.log(`  - ${body.name}`);
+    if (body.nameEn) console.log(`    (${body.nameEn})`);
+    console.log(`    Oeffentliches Register: ${body.hasPublicRegister}`);
+    console.log(`    Digitale Nachweise: ${body.issuesDigitalCredentials}`);
+  }
+  console.log();
+
+  // --- 2. Generate identities ---
+  const arzt = generateKeyPair();      // The verifying doctor (Arzt)
+  const patient = generateKeyPair();   // Person being verified
+
+  // --- 3. Create Tier 3 credential (German output) ---
+  console.log(`--- ${t('tier_3')}: ${t('credential_professional')} ---`);
+  console.log(getTierDescription(3));
+  console.log();
+
+  const credential = await createProfessionalCredential(
+    arzt.privateKey,
+    patient.publicKey,
+    {
+      profession: 'doctor',
+      jurisdiction: 'DE',
+    }
+  );
+
+  const verification = await verifyCredential(credential);
+  const parsed = parseCredential(credential)!;
+
+  console.log(`${t('credential_professional')}: ${t('status_valid')}`);
+  console.log(`  ${t('msg_signature_valid')}`);
+  console.log(`  ${t('tier_3')}: ${parsed.profession}, ${parsed.jurisdiction}`);
+  console.log();
+
+  // --- 4. GDPR compliance check ---
+  // Germany has the strictest GDPR enforcement in the EU, with both federal
+  // and 16 state-level DPAs (Datenschutzbehoerden).
+  console.log(`--- DSGVO-Konformitaetspruefung ---`);
+  const compliance = checkCredentialCompliance(credential, 'DE');
+  console.log(`Konform: ${compliance.compliant}`);
+
+  for (const issue of compliance.issues) {
+    const prefix = issue.severity === 'error' ? '[FEHLER]'
+      : issue.severity === 'warning' ? '[WARNUNG]'
+      : '[INFO]';
+    console.log(`  ${prefix} ${issue.message}`);
+    console.log(`    Verordnung: ${issue.regulation}`);
+    if (issue.remediation) {
+      console.log(`    Massnahme: ${issue.remediation}`);
+    }
+  }
+  console.log();
+
+  // --- 5. Cross-border transfer to France (EU internal) ---
+  // Under GDPR, intra-EU transfers are generally permitted as all member states
+  // are subject to the same regulation. However, national implementations may differ.
+  console.log('--- Grenzueberschreitende Uebermittlung: DE -> FR ---');
+  const crossBorder = checkCrossBorderCompliance('DE', 'FR');
+  console.log(`Erlaubt: ${crossBorder.allowed}`);
+  if (crossBorder.mechanism) {
+    console.log(`Mechanismus: ${crossBorder.mechanism}`);
+  }
+
+  for (const issue of crossBorder.issues) {
+    console.log(`  [${issue.severity.toUpperCase()}] ${issue.message}`);
+  }
+  console.log();
+
+  // --- 6. eIDAS electronic signature recognition ---
+  // The eIDAS regulation (EU 910/2014) provides mutual recognition of electronic
+  // signatures across EU member states. German beA (besonderes elektronisches
+  // Anwaltspostfach) is an example of qualified electronic signature infrastructure.
+  console.log('--- eIDAS Anerkennung ---');
+  const fr = getJurisdiction('FR');
+  console.log(`DE e-Signatur anerkannt: ${de.eSignatureRecognised}`);
+  console.log(`FR e-Signatur anerkannt: ${fr?.eSignatureRecognised}`);
+  console.log('eIDAS ermoeglicht die gegenseitige Anerkennung qualifizierter');
+  console.log('elektronischer Signaturen zwischen EU-Mitgliedstaaten.');
+  console.log();
+
+  // --- 7. Mutual recognition partners ---
+  const partners = getMutualRecognitionPartners('DE');
+  console.log(`Gegenseitige Anerkennung: ${partners.join(', ')}`);
+  console.log();
+
+  // --- 8. Consent and retention requirements ---
+  console.log('--- Einwilligungsanforderungen ---');
+  const consent = getConsentRequirements('DE');
+  console.log(`${t('legal_consent')} erforderlich: ${consent.requiresExplicitConsent}`);
+  console.log(`Digitales Einwilligungsalter: ${consent.consentAge}`);
+  if (consent.notes) {
+    console.log(`Hinweis: ${consent.notes}`);
+  }
+  console.log();
+
+  console.log('--- Aufbewahrungsrichtlinien ---');
+  const retention = getRetentionGuidance('DE');
+  console.log(`Richtlinie: ${retention.guidance}`);
+  console.log(`Verordnung: ${retention.regulation}`);
+  console.log();
+
+  // --- 9. Signet IQ (German output) ---
+  console.log(`--- ${t('msg_signet_iq')} ---`);
+  const trustScore = computeTrustScore(
+    patient.publicKey,
+    [credential],
+    [],
+    Math.floor(Date.now() / 1000) - 3 * 365 * 24 * 60 * 60
+  );
+  console.log(formatLocalizedTrustScore(trustScore.score));
+
+  console.log('\n=== Deutsche Arztverifizierung abgeschlossen ===');
+}
+
+main().catch(console.error);