manifest_version: '0.2' pilot: id: GRID-SC-EXEMPLAR-001 name: Cross-Border Supply Chain Exemplar description: Two-jurisdiction trade pilot using two authoritative identifier registers, a commercial invoice, GRID registrar discovery, and Digital Identity Anchors or equivalent registrar-verification evidence. status: draft-refined data_classification: synthetic-test-data production_use: false execution_guide: ../051_Pilot_Participant_Guide.md scenario_document: readme.md objectives: primary: Demonstrate that a relying party can use GRID to discover the authoritative registrar for a foreign organisation identifier and verify the organisation identity assertion contained in a commercial invoice. secondary: - Demonstrate two-jurisdiction registrar interoperability. - Demonstrate DIA-based identity verification where DIA is supported. - Separate organisation identity verification from trade-document truth. - Exercise lifecycle, failure, stale-state and historical-status cases. - Provide a repeatable payload for future national pilot overlays. scope: mandatory: - two_authoritative_registrars - supplier_organisation - buyer_organisation - commercial_invoice - grid_registrar_discovery - supplier_identity_verification - negative_identity_tests recommended: - buyer_identity_verification - supplier_dia - buyer_dia - historical_status_test optional: - purchase_order - packing_list - bill_of_lading - certificate_of_origin - digital_product_passport - digital_conformance_credential - digital_facility_record - carrier_identity - trade_finance_relying_party jurisdictions: - id: JUR-A code: AA label: Jurisdiction A role: supplier_exporter_jurisdiction real_world_mapping: null notes: Replace only after actual pilot participation is agreed. - id: JUR-B code: BB label: Jurisdiction B role: buyer_importer_jurisdiction real_world_mapping: null notes: Replace only after actual pilot participation is agreed. registrars: - id: REG-A jurisdiction_ref: JUR-A name: AA Corporate Registry authoritative_status: synthetic-pilot register_type: organisation register_id: AA.CORP identifier_pattern: ^AA\.CORP\.\d{8}$ grid_participant: true grid_status: active sovereign_node: repository_url: https://example.test/registrar-a/repository public_base_url: https://registrar-a.example.test registrar_endpoint: https://registrar-a.example.test/registrars/corporate.json trust: participant_signing_key_fingerprint: TEST-FINGERPRINT-REG-A did: did:web:registrar-a.example.test did_document_url: https://registrar-a.example.test/.well-known/did.json capabilities: dia_issuance: true online_query: true resolver: true owner_role: Registrar A Data Owner authority_basis: legal_mandate_reference: null legal_effect_or_register_function: null accountable_body: AA Corporate Registry public_accountability_mechanism: null operational_operator: name: null delegation_reference: null technical_contact: null schema: name: registrar-v1 version: record-at-execution compatibility_policy: follow GRID policy when adopted; otherwise pin and retain version used - id: REG-B jurisdiction_ref: JUR-B name: BB Companies Authority authoritative_status: synthetic-pilot register_type: organisation register_id: BB.CORP identifier_pattern: ^BB\.CORP\.\d{8}$ grid_participant: true grid_status: active sovereign_node: repository_url: https://example.test/registrar-b/repository public_base_url: https://registrar-b.example.test registrar_endpoint: https://registrar-b.example.test/registrars/corporate.json trust: participant_signing_key_fingerprint: TEST-FINGERPRINT-REG-B did: did:web:registrar-b.example.test did_document_url: https://registrar-b.example.test/.well-known/did.json capabilities: dia_issuance: true online_query: true resolver: true owner_role: Registrar B Data Owner authority_basis: legal_mandate_reference: null legal_effect_or_register_function: null accountable_body: BB Companies Authority public_accountability_mechanism: null operational_operator: name: null delegation_reference: null technical_contact: null schema: name: registrar-v1 version: record-at-execution compatibility_policy: follow GRID policy when adopted; otherwise pin and retain version used actors: - id: ACT-SUPPLIER type: organisation role: supplier_exporter name: Meridian Components Ltd jurisdiction_ref: JUR-A registrar_ref: REG-A identifiers: - scheme: AA.CORP value: AA.CORP.10000001 authoritative: true source: REG-A - scheme: trader-id value: AA.TRADE.500001 authoritative: false source: synthetic-extension optional: true dids: - value: did:web:supplier.example.test purpose: dia_subject controller: ACT-SUPPLIER provisioning_model: applicant-controlled control_verification: to-be-recorded legal_identity_effect: none-by-itself authority_to_act_effect: none-by-itself address: text: 10 Example Export Park, Port Alpha synthetic: true - id: ACT-BUYER type: organisation role: buyer_importer name: Northstar Manufacturing Ltd jurisdiction_ref: JUR-B registrar_ref: REG-B identifiers: - scheme: BB.CORP value: BB.CORP.20000001 authoritative: true source: REG-B - scheme: trader-id value: BB.TRADE.600001 authoritative: false source: synthetic-extension optional: true dids: - value: did:web:buyer.example.test purpose: dia_subject controller: ACT-BUYER provisioning_model: applicant-controlled control_verification: to-be-recorded legal_identity_effect: none-by-itself authority_to_act_effect: none-by-itself address: text: 20 Example Industrial Zone, Port Beta synthetic: true - id: ACT-GRID type: infrastructure role: grid name: GRID Pilot endpoints: directory: https://grid.unece.org/docs/draft/Pilots/Sandbox/grid-directory/ notes: Replace/add execution-specific endpoints when the actual pilot instance and artefacts are known. - id: ACT-GRID-OPS type: operator role: grid_operator name: GRID/UNICC Pilot Operations - id: ACT-CARRIER type: organisation role: carrier name: Example Ocean Logistics Ltd enabled: false optional: true identifiers: - scheme: carrier-example value: CC.CARRIER.30000001 authoritative: false - id: ACT-CERT-ISSUER type: authority role: certificate_issuer name: Example Origin Certification Authority enabled: false optional: true transaction: id: TX-2026-0001 type: cross-border-sale seller_ref: ACT-SUPPLIER buyer_ref: ACT-BUYER product: product_code: BCM-400 description: Industrial battery control module quantity: 100 unit: EA unit_price: 125.0 currency: USD total_value: 12500.0 purchase_order_reference: PO-2026-0442 shipment_reference: SHIP-2026-0100 documents: - id: DOC-INVOICE-001 type: commercial-invoice mandatory: true issuer_ref: ACT-SUPPLIER recipient_refs: - ACT-BUYER transaction_ref: TX-2026-0001 document_number: INV-2026-0001 issue_date: '2026-09-22' formats: canonical: json human_readable: pdf schema: name: pilot-commercial-invoice version: '0.1' note: Identity-field exemplar only. Map to the chosen UN/CEFACT invoice semantic model for an implementation pilot. organisation_identifiers: seller: AA.CORP.10000001 buyer: BB.CORP.20000001 credential_references: - CRED-DIA-SUPPLIER - CRED-DIA-BUYER assertions: grid_identity_scope: - seller_organisation_identity - buyer_organisation_identity outside_grid_identity_scope: - goods_existence - shipment_execution - origin - conformance - price_correctness - payment_obligation data_quality: seller_name: asserted seller_organisation_identifier: asserted buyer_name: asserted buyer_organisation_identifier: asserted invoice_number: asserted goods_description: asserted - id: DOC-PO-001 type: purchase-order mandatory: false enabled: false issuer_ref: ACT-BUYER recipient_refs: - ACT-SUPPLIER transaction_ref: TX-2026-0001 document_number: PO-2026-0442 - id: DOC-PACKING-001 type: packing-list mandatory: false enabled: false issuer_ref: ACT-SUPPLIER recipient_refs: - ACT-BUYER transaction_ref: TX-2026-0001 document_number: PL-2026-0001 - id: DOC-BOL-001 type: bill-of-lading mandatory: false enabled: false issuer_ref: ACT-CARRIER recipient_refs: - ACT-BUYER transaction_ref: TX-2026-0001 document_number: BOL-2026-0001 - id: DOC-COO-001 type: certificate-of-origin mandatory: false enabled: false issuer_ref: ACT-CERT-ISSUER recipient_refs: - ACT-BUYER transaction_ref: TX-2026-0001 document_number: COO-2026-0001 credentials: - id: CRED-DIA-SUPPLIER type: digital-identity-anchor mandatory: true issuer_ref: REG-A subject_ref: ACT-SUPPLIER registered_identifier: AA.CORP.10000001 subject_did: did:web:supplier.example.test url: https://pilot.example.test/dia/AA.CORP.10000001.json status: active synthetic: true expected_verification: VERIFIED credential_level: registrar_to_entity provisioning_model: applicant-controlled issuance_time: null status_effective_from: null status_effective_to: null historical_verification_material: to-be-recorded - id: CRED-DIA-BUYER type: digital-identity-anchor mandatory: false recommended: true issuer_ref: REG-B subject_ref: ACT-BUYER registered_identifier: BB.CORP.20000001 subject_did: did:web:buyer.example.test url: https://pilot.example.test/dia/BB.CORP.20000001.json status: active synthetic: true expected_verification: VERIFIED credential_level: registrar_to_entity provisioning_model: applicant-controlled issuance_time: null status_effective_from: null status_effective_to: null historical_verification_material: to-be-recorded - id: CRED-DPP-001 type: digital-product-passport mandatory: false enabled: false issuer_ref: ACT-SUPPLIER subject: BCM-400 url: https://pilot.example.test/dpp/BCM-400.json - id: CRED-DCC-001 type: digital-conformance-credential mandatory: false enabled: false issuer_ref: ACT-CERT-ISSUER subject: BCM-400 url: https://pilot.example.test/dcc/BCM-400.json - id: CRED-DFR-001 type: digital-facility-record mandatory: false enabled: false issuer_ref: ACT-SUPPLIER subject: Supplier Manufacturing Facility url: https://pilot.example.test/dfr/facility-001.json - id: CRED-DELEGATION-001 type: authority-delegation mandatory: false enabled: false represented_entity_ref: ACT-SUPPLIER delegate_ref: null scope: null effective_from: null effective_to: null status: test-placeholder resolves_to_entity_dia: CRED-DIA-SUPPLIER note: Authority-to-act credential is separate from entity DIA and may contain purpose-limited personal/agent data. claims: - id: CLAIM-SUPPLIER-ID class: registrar-authoritative subject_ref: ACT-SUPPLIER predicate: has_registered_identifier object: AA.CORP.10000001 authority_ref: REG-A expected_result: VERIFIED - id: CLAIM-BUYER-ID class: registrar-authoritative subject_ref: ACT-BUYER predicate: has_registered_identifier object: BB.CORP.20000001 authority_ref: REG-B expected_result: VERIFIED - id: CLAIM-REG-A-GRID class: grid-membership-discovery subject_ref: REG-A predicate: is_listed_in_grid_pilot object: true expected_result: VERIFIED - id: CLAIM-INVOICE-GOODS class: participant-business-assertion subject_ref: DOC-INVOICE-001 predicate: describes_goods object: BCM-400 authority_ref: ACT-SUPPLIER grid_verification_scope: false verification_profile: primary_relying_party: ACT-BUYER result_vocabulary: - VERIFIED - NOT_VERIFIED - INDETERMINATE - NOT_APPLICABLE checks: - id: CHECK-REGISTRAR-DISCOVERY description: Discover authoritative registrar for supplier identifier. inputs: - AA - AA.CORP.10000001 expected_registrar_ref: REG-A - id: CHECK-GRID-STATUS description: Confirm registrar status in GRID pilot. registrar_ref: REG-A expected_result: VERIFIED - id: CHECK-DIA-PROOF description: Verify supplier DIA cryptographically. credential_ref: CRED-DIA-SUPPLIER expected_result: VERIFIED - id: CHECK-ID-MATCH description: Compare invoice seller identifier to DIA identifier. document_ref: DOC-INVOICE-001 credential_ref: CRED-DIA-SUPPLIER expected_result: VERIFIED - id: CHECK-NAME-CONSISTENCY description: Compare invoice seller name with authoritative evidence. document_ref: DOC-INVOICE-001 subject_ref: ACT-SUPPLIER expected_result: VERIFIED - id: CHECK-KEY-CONTROL-BOUNDARY description: Ensure successful DID/key control is not reported as legal identity without authoritative evidence. expected_result: VERIFIED_AS_SEPARATE_ASSURANCE - id: CHECK-AUTHORITY-TO-ACT description: Where delegation is in scope, verify actor authority separately from entity identity. expected_result: SEPARATE_DECISION tests: - id: TC-SC-001 title: Discover Supplier Registrar mandatory: true expected_result: VERIFIED runbook_gate: G6 - id: TC-SC-002 title: Verify GRID Source Authentication mandatory: true expected_result: VERIFIED runbook_gate: G5 - id: TC-SC-003 title: Resolve Supplier DIA mandatory_when: CRED-DIA-SUPPLIER is enabled expected_result: VERIFIED runbook_gate: G6 - id: TC-SC-004 title: Verify Supplier DIA Cryptographically mandatory_when: CRED-DIA-SUPPLIER is enabled expected_result: VERIFIED runbook_gate: G6 - id: TC-SC-005 title: Match Invoice Identifier to DIA mandatory_when: CRED-DIA-SUPPLIER is enabled expected_result: VERIFIED runbook_gate: G6 - id: TC-SC-006 title: Match Organisation Name mandatory: true expected_result: VERIFIED runbook_gate: G6 - id: TC-SC-007 title: Verify Buyer Identity Reciprocally mandatory: false recommended: true expected_result: VERIFIED runbook_gate: G6 - id: TC-SC-008 title: Unknown Supplier Identifier mandatory: true mutation: invoice_supplier_identifier: AA.CORP.99999999 expected_result: NOT_VERIFIED runbook_gate: G7 - id: TC-SC-009 title: Identifier DIA Mismatch mandatory: true mutation: invoice_supplier_identifier: AA.CORP.10000002 dia_identifier: AA.CORP.10000001 expected_result: NOT_VERIFIED runbook_gate: G7 - id: TC-SC-010 title: Valid DIA for Wrong Organisation mandatory: true expected_result: NOT_VERIFIED runbook_gate: G7 - id: TC-SC-011 title: Invalid DIA Signature mandatory: true expected_result: NOT_VERIFIED runbook_gate: G7 - id: TC-SC-012 title: Unknown Registrar mandatory: true expected_result: NOT_VERIFIED runbook_gate: G7 - id: TC-SC-013 title: Inactive or Withdrawn Registrar mandatory: true expected_result: INDETERMINATE note: Final result depends on defined current/historical policy. runbook_gate: G7 - id: TC-SC-014 title: Historical Verification mandatory: true expected_result: INDETERMINATE note: Pilot must record as-of semantics rather than assume them. runbook_gate: G7 - id: TC-SC-015 title: Registrar Metadata Update mandatory: true expected_result: VERIFIED runbook_gate: G7 - id: TC-SC-016 title: Supplier DID Change mandatory: false recommended: true expected_result: VERIFIED runbook_gate: G7 - id: TC-SC-018 title: Invoice Without DIA Reference mandatory: false recommended: true expected_result: INDETERMINATE note: Outcome depends on alternate supported discovery method. runbook_gate: G7 - id: TC-SC-020 title: Registrar Without DIA Capability mandatory: false recommended: true expected_result: INDETERMINATE note: Registrar discovery should still work. runbook_gate: G7 - id: TC-SC-021 title: Stale GRID Snapshot mandatory: true expected_result: INDETERMINATE runbook_gate: G7 - id: TC-SC-022 title: GRID Temporarily Unavailable mandatory: true expected_result: INDETERMINATE note: Previously obtained credentials may remain locally verifiable. runbook_gate: G7 - id: TC-SC-023 title: Registrar Endpoint Unavailable mandatory: true expected_result: INDETERMINATE runbook_gate: G7 - id: TC-SC-024 title: Name Typo with Correct Identifier mandatory: true expected_result: VERIFIED_WITH_DISCREPANCY note: Identifier remains primary; discrepancy must be surfaced for human or business handling. runbook_gate: G7 - id: TC-SC-025 title: Valid Organisation Identity, Fraudulent Invoice mandatory: true expected_result: IDENTITY_VERIFIED_DOCUMENT_NOT_VERIFIED runbook_gate: G7 - id: TC-SC-026 title: Key Control Is Not Legal Identity mandatory: true expected_result: SEPARATE_ASSURANCE_ONLY runbook_gate: G7 - id: TC-SC-027 title: Authority to Act / Delegated Representative mandatory: false mandatory_when: delegation is in scope expected_result: SEPARATE_AUTHORITY_DECISION runbook_gate: G7 - id: TC-SC-028 title: Merger / Successor Entity mandatory: false recommended: true expected_result: HISTORICAL_PREDECESSOR_PRESERVED runbook_gate: G7 - id: TC-SC-029 title: Entity Termination mandatory: true expected_result: CURRENT_AND_HISTORICAL_STATUS_SEPARATED runbook_gate: G7 - id: TC-SC-030 title: Schema Version Compatibility mandatory_when: more than one schema version is supported expected_result: EXPLICIT_VERSION_HANDLING runbook_gate: G7 extended_tests: - id: TC-SC-101 title: Cross-document Supplier Identity Consistency enabled: false documents: - DOC-INVOICE-001 - DOC-PACKING-001 - DOC-BOL-001 - id: TC-SC-102 title: Carrier Identity Verification enabled: false actor_ref: ACT-CARRIER - id: TC-SC-103 title: Certificate Issuer Identity enabled: false document_ref: DOC-COO-001 - id: TC-SC-104 title: DPP Issuer Identity enabled: false credential_ref: CRED-DPP-001 - id: TC-SC-105 title: DCC Issuer Identity enabled: false credential_ref: CRED-DCC-001 - id: TC-SC-106 title: Facility Record Linkage enabled: false credential_ref: CRED-DFR-001 evidence: required_fields: - test_case_id - timestamp_utc - tester - document_id - claim_tested - claimed_identifier - grid_reference - registrar_discovered - registrar_grid_status - credential_reference - credential_verification_result - identifier_comparison_result - overall_result - limitations - evidence_links - credential_issuance_time - transaction_time - verification_time - status_effective_time - schema_version - cryptographic_control_result - legal_identity_result - authority_to_act_result prohibited_content: - private_keys - access_tokens - passwords - unnecessary_personal_data acceptance: mandatory_conditions: - Registrar A is discoverable through GRID. - Registrar B is discoverable through GRID. - Registrar participant source authentication is demonstrated. - Commercial invoice carries supplier and buyer organisation identifiers. - Supplier identity can be matched to registrar-linked evidence. - Unknown supplier identifier is detected. - Identifier/DIA mismatch is detected. - Invalid DIA signature is detected where DIA is used. - Valid identity does not cause a fraudulent invoice to be labelled valid. - Historical/status uncertainty is represented explicitly. - Independent relying-party verification evidence is retained. - Key/DID control is not reported as legal identity without authoritative evidence. - Current status and historical/as-of status are represented separately. - Registrar legal accountability and any delegated operational operator are distinguishable. - Schema version used for each relevant artefact is recorded. runbook_mapping: G0: scenario_activity: Pilot participants and use case approved. G1: scenario_activity: Repositories/test harness ready. G2: scenario_activity: Registrar and subject trust material ready. G3: scenario_activity: Registrar GRID metadata ready. G4: scenario_activity: Sovereign Nodes published. G5: scenario_activity: GRID connected and harvesting authenticated source. G6: scenario_activity: Invoice identity verification works end-to-end. G7: scenario_activity: Negative, lifecycle and historical tests completed. G8: scenario_activity: Repeat execution and support process active. G9: scenario_activity: Findings and scenario disposition recorded. real_pilot_overlay: instructions: - Replace JUR-A/JUR-B with actual participating jurisdictions only after pilot participation is agreed. - Replace synthetic registrar names only with registrars accepted through the GRID pilot process. - Replace synthetic identifier patterns with the actual authoritative scheme without changing the underlying identifier. - Replace example.test DIDs/URLs with real pilot endpoints. - Keep negative-test identifiers clearly separated from production data. - Record exact document semantic standard/profile used by the live pilot. candidate_patterns: - India exporter / China buyer - India exporter / Spain buyer - Three-country component / assembler / buyer chain note: Candidate patterns are planning examples only and do not assert that any specific national registrar has completed GRID onboarding. change_history: - version: '0.1' date: '2026-09-22' change: Initial complete synthetic manifest for supply-chain exemplar. - version: '0.2' date: '2026-09-22' change: Refined trust levels, key-control/legal-identity/authority separation, registrar authority and operator metadata, DID provisioning model, temporal evidence and lifecycle/schema tests. trust_model: credential_levels: - level: grid_to_registrar label: GRID registrar trust/participation evidence purpose: Authenticate and recognise a participating Registrar in the GRID pilot. dia_term_used: false - level: registrar_to_entity label: Digital Identity Anchor (DIA) purpose: Bind an existing authoritative entity identifier to the subject/cryptographic identifier under the Registrar process. dia_term_used: true separations: legal_identity: Established from the applicable authoritative register/evidence. cryptographic_control: Technical proof of control of a key/DID; not legal identity. authority_to_act: Separate delegated/representative authority; not implied by entity identity or key control.