feat(schema): Multiverseal Twin — federation-facing identity/reputation projection

[mdheller]

Multiverseal Twin — the federation-facing identity/reputation projection

Extends ADR-0013 (digital soul). ADR-0013 built the private core and the reputation plane; this adds the hardened object that actually touches the untrusted, federated world — on one reference-gated holographic substrate — and unifies three loose threads (bind-reputation-to-evidence, the reversibility-distance privacy metric, and "read movement not score").

Contracts

Schema	Role
TwinAttestation	a foreign claim admitted only as bind(object, r_c) + provenance envelope (reference-at-ingest / Powell–Stetson). Bare scores are never summed. Carries the bound purpose + authorization — the capture-time receipt, which per the reidentification-economy analysis is the only place the purpose bit can live. Coherence-length grounding gate.
MultiversealTwin	reference-gated holographic bundle projecting the private DigitalSoulIdentity. One ε = capacity = crosstalk = unlinkability = reversibility distance. QEC [[n,k,d]] sharing where d = access-control policy. VRF mint/verify anchored to ProofOfSelfToken. Impersonation wall + phase-retrieval hardening.
InterferometricDiff	the primary read is the fringe (Δφ), not the score — a leading indicator that moves below scalar sensitivity, with global tamper-evidence for free. AscensionReading is its on-device self-directed special case.

Guarantees (rigor-tiered, per source spec)

• Reference-at-ingest is mandatory and machine-checked (no bare object stored; purpose+proof required).
• One privacy surface: ε is flagged as the reversibility-distance ledger; 1 ≤ d ≤ n; access = code wedge.
• Mint asymmetry: VRF anchored to a verified core (urn:srcos:proof-of-self:); forgery reduces to breaking VRF.
• Impersonation wall: a watchable persona of u mints only under u's key or a u-signed capability; phase-retrieval hardening asserted.
• Substrate is linear by design; Sybil/nonlinear trust policy stays in a separate layer (tracked open problem).

Verification

fmt/schema validation pass; tools/validate_multiverseal_twin_examples.py (invariant checks) wired into make validate; duplicate-$id guard clean (352 schemas). Built in an isolated worktree.

🤖 Generated with Claude Code