Wanderland Core: Identity

The actor in a crossing. Metadata only — keys live in storage at :pki:keys:{id}. The identity carries the id; the storage holds the key material.

The Struct

The Class

class Identity
  attr_reader :id, :name, :roles, :type, :code_version, :token, :scopes
end

• id — unique identifier for this actor (e.g., "adapter:http", "boundary:echo", "engine:seal", "alice"). This is also the PKI key name — :pki:keys:{id} is where the keypair lives.
• name — display name.
• roles — array of role symbols (the ceiling — maximum capabilities).
• type — what kind of actor (:human, :service, :boundary).
• code_version — optional version tag for the code this identity represents.
• token — JWT token issued by IDP with attenuated scopes.
• scopes — array of capability symbols currently held (the floor — what was granted).

Query methods: human?, service?, scope?(:name).

claims returns a JWT-ready hash. to_h is an alias for claims.

Keys Are Not On The Identity

Identity is metadata only. No public_key, no private_key fields. The id IS the reference — Activities::PKI.sign(storage, identity.id, payload) looks up the keypair at :pki:keys:{id}. Multiple runtimes can share an identity metadata struct while the actual key material varies by storage mount (dev uses in-memory, prod uses SSM-provisioned, etc.).

Where Identity Appears

• Boundary registration — each boundary can declare an identity via the identity: keyword on the DSL. The Crossing struct unpacks effective_identity(reg) into the from_addr field on every emitted record.
• Crossing records — every crossing's from_addr is the producing identity's id. Queries like context.by_identity("adapter:http") filter by this value.
• Authorization — authorize(identity:, requires:) checks the identity's scopes against the boundary's requirements.
• IDP — IDP::YamlStore loads identities from YAML and provisions their keys into storage (:pki:keys:{id}). Mock OIDC, same claims shape.
• PKI — the identity's id is the PKI key name. Activities::PKI.sign(storage, id, payload) signs as that identity.
• Crossing signing — Crossing#sign(storage) uses the boundary's identity id to sign; Crossing#verified? verifies against the same.

Source File

wanderland-core/lib/wanderland/identity.rb

Site Audit

wanderland.dev