Use one identity system for: * signing tx (off-chain) * signing batches (governance) * signing anchors (on-chain multisig / threshold)
Practical options: * DIDs with Ed25519 keys (published DID doc on the static site) * passkeys/WebAuthn for user-friendly signing * key rotation: publish new key in DID doc signed by old key
This makes the system cohesive: *same towel identity*, different layers of finality.
# See