The Gate and the Playground: Age Attestation, Exclusion, and the Architecture of Verified Peer Space

Abstract

The age assurance debate has settled into a standoff between child safety and privacy in which each side concedes the other has a real interest and neither produces an architecture that serves both. This paper argues that the framing is wrong. The binding constraint on age assurance is neither safety nor privacy. It is exclusion, and exclusion is a distribution problem rather than a cryptographic one. The cryptography required to prove that a person is over a given age without disclosing the person’s name, birthday, face, or any other attribute has existed since 1983, and the hardware required to bind a credential to the human presenting it is a deployed W3C standard. What does not exist is a credential that reaches everyone. Every scheme now on the table requires the subject to apply, to pay, to travel, to produce documents, or to own a device manufactured by one of the two companies the scheme is meant to regulate, and each of those requirements falls on the same populations: the poor, the undocumented, and the disabled. This paper proposes the distributive inversion. A boolean age predicate, blind signed by the issuing state, delivered on free standalone hardware, issued at birth alongside the identifiers a government already assigns, and entitled rather than applied for. It further argues that age assurance requires two credentials and not one, because a binary attestation that a holder is over eighteen forces responsible guardians to make platforms blind to the children they are trying to protect, and that the correct deliverable of the architecture is composition rather than exclusion: a space in which every occupant is a verified peer, every occupant’s guardian has consented, and intensive supervision therefore raises no adult privacy objection because there is no adult inside to raise one. It argues that supervision is not an addition to the gate but the only mechanism that detects a compromised credential, which converts the rule against treating a gate as a discharge from a policy preference into an architectural necessity. It rejects the zero retention instinct on the ground that a child groomed at thirteen and disclosing at sixteen needs the record to exist, and proposes instead that the objection to retention was never duration but custody and purpose, resolved by escrow. The paper closes by identifying what the architecture does not solve, including the guardian who is himself the threat, the impossibility of binding an infant, the severing of relationships at band boundaries, and the bystander, who never approaches a gate at all and for whom no credential architecture can substitute for a rule keyed to the data subject.

Keywords

• age assurance
• age verification
• zero-knowledge proof
• blind signature
• hardware credential
• digital identity
• COPPA
• child safety
• disability
• exclusion
• content moderation
• verified peer space