Governance Stub · Updated 2026-05-14

Conformance & certification scheme

How members prove they meet the standard. Borrows the Open Banking pattern: technical conformance tests, annual re-certification, formal scheme owner separate from regulators.

Status

This is a stub for upcoming work. The structure below is what we plan to populate; existing artefacts in source/ that feed it are cited inline.

What already exists

Proposed structure

  1. Scope — what's being conformed against (which PDTF version, which overlays, which API spec)
  2. Levels — minimum / extended / role-specific (issuer / verifier / holder / orchestrator)
  3. Test suites — schema validation, API conformance, VC issuance, DID resolution
  4. Self-assessment — questionnaire + evidence
  5. Independent audit — when required, who can perform it
  6. Annual re-certification — cadence, fees, evidence refresh
  7. Trust Registry entry — outcome: a public, machine-readable record
  8. Suspension & revocation — when and how

Open Banking parallel

Raidiam — the Sandbox delivery partner — operated UK Open Banking's conformance infrastructure. Worth lifting the working patterns wholesale: FAPI conformance tests, the OBL certification process, directory-based participant registry. See ToIP governance — Open Banking parallel.