# Credinberg - Comprehensive Technical & Architectural Documentation

## Executive Summary
Credinberg (https://credinberg.com) is an enterprise-grade digital credential platform built on the W3C Verifiable Credentials Data Model and the Open Badges 3.0 specification. It solves the credential fraud and vendor lock-in crises that plague traditional paper diplomas, static PDF certificates, and legacy proprietary badge ecosystems.

---

## 1. Architectural Foundation: Open Badges 3.0 (OBv3)
Open Badges 3.0 represents a generational shift in credential verification:
- **W3C Verifiable Credentials Alignment:** Unlike Open Badges 2.0 (which relied on standalone hosted JSON-LD blobs), OBv3 is fully compatible with international digital identity wallets (Apple Wallet, Google Wallet, and decentralized DID wallets).
- **Cryptographic Immutability:** Credentials contain cryptographic signatures generated with standard proof suites (such as Ed25519 or RSA-SHA256). Any alteration to credential data or visual artwork breaks the mathematical signature.
- **Decentralized Identifiers (DIDs) & Domain Verification:** Issuers are cryptographically linked to their official authoritative web domain via DNS TXT records.

---

## 2. Security & Anti-Fraud Architecture

### Cryptographic Badge Baking (Offline Portability)
Credinberg embeds signed assertion payloads directly into badge visual artwork:
- **PNG iTXt Chunk Injection:** Embeds uncompressed UTF-8 JSON-LD assertions into designated international text chunks (`iTXt`) conforming to RFC 2083.
- **SVG Metadata Encapsulation:** Encapsulates standard XML assertion schemas within `<metadata>` tags without altering responsive vector scalability.
- **Offline Independent Verification:** Anyone can download a baked Credinberg badge and verify its authenticity offline using any standard W3C validator without calling Credinberg's database servers.

### Authoritative DNS TXT Verification
To eliminate diploma mills and organizational impersonation:
1. When an organization registers, Credinberg generates an isolated cryptographic challenge token.
2. The organization's IT administrator publishes a designated TXT record to their authoritative DNS root.
3. Credinberg validates the record across global DNS-over-HTTPS infrastructure (Google, Cloudflare).
4. Approved organizations receive the **Credinberg Verified Issuer Shield**.

---

## 3. Standardized Skills & Taxonomy Integration
Credinberg enforces ontological alignment for micro-credentials:
- **ESCO (European Commission):** Mapping badges to 13,800+ standardized skills and 3,000+ occupations with persistent URIs.
- **O*NET (U.S. Department of Labor):** Aligning credentials to occupational codes and Knowledge, Skills, and Abilities (KSAs).
- **Applicant Tracking System (ATS) Ingestion:** Recruitment algorithms can parse machine-readable JSON-LD competencies directly from earner profiles and badges without manual resume screening.

---

## 4. Key Links & Direct Resources
- Website: https://credinberg.com
- Features: https://credinberg.com/features
- Public Verification Portal: https://credinberg.com/verify
- Standards Blog: https://credinberg.com/blog
- Organization Portal: https://credinberg.com/login/org
- Earner Passport: https://credinberg.com/login/user
- Security Whitepaper: https://credinberg.com/security
- Contact / Organization Inquiries: https://credinberg.com/contact (org@credinberg.com)