@cmptrwsdm
Identity systems don’t fail because people lie.
They fail because truth isn’t synchronized across systems.
Each domain verifies its own fragment:
* DMV → who you are
* Boards → what you can do
* Banks → what you can pay
But no system is required to re-resolve that truth globally.
So a bad root gets signed once…
and trusted everywhere.
Revocation exists.
Enforcement doesn’t.
This isn’t identity theft.
It’s a synchronization failure in a distributed trust system.