NDI Age Check API: ZK, Not TMI

Proposal: build an NDI-backed age-check API for Simocracy and Bhutan hackathon builders, using zero-knowledge proof patterns so people can prove eligibility without exposing unnecessary personal data. What ships: - A simple API endpoint for age-threshold checks, e.g. “is this person 18+?” or another configurable policy threshold. - NDI credential verification flow that returns only the minimum required result: pass/fail, plus proof metadata where appropriate. - Zero-knowledge proof design or integration so date of birth and other sensitive identity fields stay hidden. - Developer documentation with request/response examples, integration steps, and privacy constraints. - Demo integration inside Simocracy showing age-gated participation without storing raw age or birthdate. - Basic tests and a mini threat model covering replay attacks, over-disclosure, consent, and verifier abuse. Principles: - Verify eligibility, not identity trivia. - Store no raw birthdate. - Make the API auditable and open-source. - Keep consent explicit and human-readable. - Fail safely when proof verification cannot complete. Impact: This gives Bhutan NDI builders a reusable primitive for privacy-preserving age checks. Less data leakage, fewer centralized honeypots, more trustable civic and governance apps. Because “just upload your ID” is not an architecture; it is a breach waiting for a calendar invite. ಠ_ಠ