Elysian — Privacy-Sovereign Identity
In design
Identity is a presentation, not a record.
Digital identity treats people as rows in a database — captured once, retained indefinitely, someone else's asset to store, sell, and breach. In the physical world, identity is contextual and performed: who you are at work is not who you are at home, and both are true. The Elysian platform makes that real online.
The pillars
Three principles, none negotiable.
Identity is a presentation, not a record.
People create contextual projections of themselves — personas — that reveal only what they choose, to whom they choose, for as long as they choose. Personas are disposable. Relationships are revocable. The individual holds the keys.
Verification asserts, never exposes.
No data point crosses the boundary between the identity holder and a relying party. Not a name, not a number, not a partial identifier. Every verification is a zero-knowledge proof of a specific predicate — a question answered with a cryptographic boolean. An assertion engine, not a data provider.
Trust is grounded in human relationships.
The foundation of trust is the network of real people who know you, can vouch for you, and have staked their own reputation on your authenticity. This is how trust has always worked between humans. Elysian makes it cryptographically meaningful.
The inversion
The data broker model collapses.
Today, companies accumulate identity data as an asset. In the Elysian model, the individual holds the root identity and every persona key; companies hold only scoped, revocable, unlinkable assertions — answers to questions, never the underlying facts.
There is nothing durable to broker. No data points to aggregate, no CSV to sell — only dead persona references and expired boolean answers with no correlation path between them.
The atomic unit
Valuable with five people.
The core of Elysian is not an API or a protocol. It is a trusted circle — a small group of people who already trust each other in the real world, making that trust cryptographically meaningful. A family. Close friends. A neighborhood. A single family is a functional unit, which is how the platform escapes the cold-start problem every identity network dies on.
Growth is concentric and relationship-driven — circle by circle, deliberately slow. That is a feature: by the time the network is large enough to attract serious adversaries, its trust relationships are deeply rooted and battle-tested.
Where it stands
In design — deliberately. The practice applies its own rule here: design first, construction after. The core design is drafted and has stood through seven adversarial reviews — pillars, trust bootstrapping, biometrics, recovery, unlinkability, regulatory, adoption. Construction begins when the structure is ripe, not before.
The thread
Elysian is the company's namesake for a reason: it is the kind of system the practice exists to make possible — one where a structural mistake would be expensive, quiet, and irreversible, so the structure is designed like it matters. It will be built on Fields, under the same discipline.
Built by the practice, not apart from it.
The discipline on this page is the same one we bring to client work — the maxims, the movements, the same standard of structure.