Consent-native authorization
An OAuth-style grant flow (PKCE, single-use codes, origin pinning) where the scopes are personal fields and the resource owner is a person. Authorization flow
Consent you can verify. Not just claim.
The Share Protocol (SP/1) is an open specification for exchanging personal data on the subject's explicit, revocable, cryptographically provable terms. Every grant is fingerprinted, every event is hash-chained, and every certificate can be verified by anyone — including regulators — without trusting the operator.
Why a protocol
Section titled “Why a protocol”Today, “proof of consent” in regulated lead flows means a screenshot and a pinky promise held by a single vendor. The market leader certifies consent by asking you to trust the market leader. The Share Protocol takes the opposite position: evidence is only evidence if the party holding it can’t rewrite it — so the protocol specifies canonical serialization, fingerprints, hash-chained audit logs, and external Merkle-anchored checkpoints that make every record independently checkable, byte for byte.
That claim is testable rather than rhetorical. SP/1 ships machine-readable conformance vectors and an independent Class V verifier written from this specification’s text rather than ported from any implementation — a different language, by different hands, reproducing every digest. Clone it and run the suite in ten seconds.
Two implementations that agree
SHA-256 fingerprints over canonical JSON, an append-only hash chain, and
signed external anchors — with machine-readable vectors and an independent,
zero-dependency verifier written from this spec alone. 36/36 checks passed. Implementations
Revocation is a first-class verb
Grants expire; revocations start a tracked cease-contact clock with acknowledgement semantics. Non-response is itself evidence. Lifecycle
Certified consent, every recipient named
Certificates bind the exact disclosure text, the named entity list, the policy text in force at opt-in, and a masked subject — publicly verifiable at a URL. Certificates
Status
Section titled “Status”SP/1 — working draft. The protocol is stewarded by PRYVC,
which operates the reference implementation (api.pryvc.com). The specification
text is licensed CC BY 4.0 —
build on it, implement it, cite it. Feedback:
protocol@pryvc.com.