Participation requires proving you're one real human; once. AgoraNet never sees or stores your identity documents; verification happens with an independent issuer and the proof lives on your device. What you get: a voice that counts exactly once, in a community with no bots. What it costs: a few minutes, and a wallet.
Unlinkability is currently operator policy, not yet cryptography. AgoraNet's gate enforces one-per-scope integrity with an operator-held secret: we are structurally honest, but you are trusting us not to look. The replacement is no longer hypothetical: a public Midnight testnet contract already proves the nullifier half on-chain with zero-knowledge proofs; that no subject can act twice in a scope, verifiable by anyone. Binding each subject to a single human (so a new secret can't just be minted) is the other half, and remains the cutover work ahead. The live gate cuts over when both halves are proven and proving is consumer-ready; until then, this notice stays up.
INTERIM (Phase A): AgoraNet itself still plays the issuer's role for the live gate; for now, you are trusting us with that too. Two honest consequences: a lost credential cannot be recovered on this interim path, and the interim issuer cannot detect a repeat verification; nothing yet stops a soul from re-verifying into a fresh start; a real identity partner closes that, and it gates public launch. The real machinery is no longer a promise: an Identus issuer runs on our test rails today (platform-operated, test network) with the full credential ceremony working and recovery proven. This notice steps down layer by layer as each piece takes over the live path.
Or just keep reading; everything public stays free to read, no account needed. This screen only reappears when you next try to act.