Skip to content

🔐 Normalize inter-agent TAD AccountIDs #1

Description

@JFWooten4

Public keys are already not a full identification route for investor accounts. Principally, wallets can only have 100 subentries, which includes one per asset. So, even ignoring contracts or different account types like a Roth, you need a subaccount ID to associate with all the wallets.

In the CAT, this firm-level unique ID gets tokenized into a consistent identifier between frontends for backend regulators. The problem is that this is an insecure and fragile linking method. For instance, someone submitting the same SSN as another investor at a different broker with two IDs will take years or more to be noticed as a duplicate of the original investor (if they are ever caught).

I propose globalizing the account IDs by moving the resolution from a per-agent definition to a global "ATAD ID," which integrates into the SEP-12 identity onboarding. Without making a call as to the PII Locale, this will let us give the nonprofit the numbering rights to define unique sending federation between any agent. It'll take some work to make happen with the corporate signer resolution, among others, but I think it's worth it.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions