Hi all,

I just submitted a first Markdown version of the position paper:

The Semantic Supply Chain: A Comparative Risk Analysis of Credential Meaning Distribution in W3C VCDM, SD-JWT VC, and ISO mdoc

The paper argues that the real issue is uncontrolled semantic resolution. This applies across credential formats: JSON-LD @context, SD-JWT VC vct and Type Metadata, mdoc namespaces, rulebooks, registries, and local verifier configuration.

The paper compares the formats across governance, integrity, operational, privacy, and issuer-authorisation risks. It also explains why simple attribute credentials may fit SD-JWT VC or mdoc well, while semantically rich enterprise KYC, DPP, supply-chain, Industry 4.0, and trusted-AI credentials need explicit and standardised semantic models.

The rationale is to motivate, support and guide the development of a HAIP4W3CVC profile for high-assurance W3C VCDM credentials in the European Business Wallet context.

haip4w3c/semantic-supply-chain-analysis.md at main · eu-business-wallet/haip4w3c

Best,
Carsten