Registry
One registry, publicly verifiable
IAASO does not operate a duplicate registry. The UUAID registry at api.uuaid.org is the sole subject registry; IAASO objects reference it. This is doctrine, not accident — one source of truth for subjects, one ledger, one anchoring chain.
1Architecture
- Subject registry. Agents, issuers, organizations and governance bodies are minted and resolved at
api.uuaid.org. Browse them at registry.uuaid.org. - Hash-chained ledger. Every registration, credential issuance, status transition and accreditation is an event in a hash-chained ledger.
- Polygon anchoring. Ledger Merkle roots are anchored on Polygon. Transparency receipts are Merkle inclusion proofs (keccak256 over RFC 8785 JCS) computed against anchored roots — anyone can verify an event happened, when, and that history was not rewritten.
- IAASO authority service. A separate service, with its own signing key never shared with registry operations, issues signed accreditations and governance events. Institutional independence is enforced by key separation, and every act is publicly replayable from the ledger.
2IAASO API surface
The IAASO views are served from the registry under api.uuaid.org/iaaso/v1:
| Method | Path | Purpose |
|---|---|---|
| GET | /iaaso/v1/resolve/{id} | Resolve an identifier (both profiles) to its subject document. |
| GET | /iaaso/v1/status/{id} | Current certification / accreditation status of a subject. |
| GET | /iaaso/v1/status/{id}/history | Full signed status history. |
| GET | /iaaso/v1/trust/issuers | Recognized issuers and their accreditation state. |
| GET | /iaaso/v1/trust/roots | Trust roots. |
| GET | /iaaso/v1/trust/keys | Active and retired signing keys. |
| POST | /iaaso/v1/verify/credential | Verify a credential: signature, issuer accreditation, status, expiry. |
| GET | /iaaso/v1/receipts/{event} | Merkle inclusion receipt for a ledger event against an anchored root. |
| GET | /iaaso/v1/crypto-inventory | Cryptographic suite inventory (IAASO-1601). |
Full request and response shapes are in the developer documentation — see the quickstart.
3Verify something right now
The registry’s public verification surfaces are live today:
# Resolve an agent in the UUAID registry
curl https://api.uuaid.org/resolve/{uuaid}
# Verify the hash-chained ledger head
curl https://api.uuaid.org/ledger/verify