`pdsx._internal.identity`

identity checks: bidirectional handles, record proofs, PLC history.

Functions

`verify_identity`

verify_identity(repo: str, resolver: AsyncIdResolver | None = None) -> Identity

resolve a handle or DID and check the handle in both directions. a handle only counts as verified when it resolves to the DID and the DID document lists it in alsoKnownAs. either half alone can be forged: anyone can put any handle in their own DID document, and a DNS record can point at any DID.

`fetch_record_proof`

fetch_record_proof(did: str, collection: str, rkey: str, resolver: AsyncIdResolver | None = None, timeout: float = 10.0) -> RecordProof

fetch sync.getRecord from the repo’s own PDS and verify it. the signing key and PDS come from the DID document, never from the PDS.

`plc_history`

plc_history(did: str, timeout: float = 10.0) -> dict[str, Any]

the did:plc audit log, each op checked and summarized.

Classes

`Identity`

Methods:

`to_dict`

to_dict(self) -> dict[str, Any]