Identus, shipped.

Three apps built on the Cloud Agent — a 1,000-idea catalyst, an NHS-facing hub, and a clinical summary anchored to a ledger. What worked, what hurt, and what we would hand a newcomer.

Arun Nadarasa · Midnight Aliit Builder & Nightforce Alpha

github.com/arunnadarasa

SSI stalls twice before line one.

Every project below is an attempt to close one of those gaps for someone else.

Three projects, one thread.

Ideation → first-mile tooling → a real regulated-domain workflow.

Identus Catalyst — 1,000 ideas, evenly mapped.

• —10 creative disciplines × 100 ideas — dance, music, film, fashion, games and more.
• —Every idea is bound to exactly one primitive: identus-did, identus-connection, identus-credential, identus-verify.
• —Strict round-robin: 25 ideas per primitive per theme, so no filter ever returns zero.
• —Each idea page ships a copy-paste mega-prompt for the participant's own AI builder.

The mega-prompt is the product.

┌ brief ─────────────── what to build, for whom
├ runtime conventions ─ framework, server fns, env
├ Identus primer ────── trust triangle in 8 lines
├ Cloud Agent API ───── endpoints · payloads
│                        state machines · RFC-7807
├ <<MODE_BLOCK>> ────── simulated | docker | fly
├ code snippet ──────── the chosen primitive
└ references ────────── docs + /llms-full.txt

Same prompt, three ways to run an agent.

Start simulated in the first hour; swap one block to go real without rewriting the app.

Five things that cost us hours.

• —postgres:13-alpine, not 16 — Flyway migrations fail on newer majors.
• —The agent needs three roles created up front: pollux-, connect- and agent-application-user.
• —An issuer DID must carry an assertionMethod key and be published — filter for it, or issuance fails late and cryptically.
• —A deterministic DEFAULT_WALLET_SEED keeps DIDs stable across restarts.
• —Cap readiness polling at 60 s and surface RFC-7807 error bodies verbatim.

Hand your knowledge base to their LLM.

$ curl https://identusprompts.lovable.app/llms-full.txt

# Hyperledger Identus Catalyst
## Primitives
## Agent modes: simulated | docker | fly
## Cloud Agent REST reference
## Gotchas

Identus Hub — the first mile, collapsed.

• —Public explainer plus a worked NHS Single Patient Record scenario for non-developers.
• —Live console: create PRISM DIDs, auto-publish issuers, issue connection-based or connectionless credentials, verify presentations, and read an activity log.
• —In-browser zero-knowledge age proof bound to a credential JWT by SHA-256 commitment.
• —Agentic-commerce demos — A2A, AP2, UCP, x402 — credentials as delegated authority.
• —Every row RLS-scoped per account, so the sandbox is safe to share publicly.

IPS Compass — credential over a clinical digest.

FHIR IPS bundle
   │  validate against the IPS guide
   ▼
SHA-256 digest        (no patient data leaves)
   │
   ├─▶ Identus credential over the digest
   │
   └─▶ Midnight anchor (Compact contract)
          │
          ▼
   verifier: existed + unchanged

What the Cloud Agent gets right — and what bites.

Try it, fork it, break it.

Questions — especially the uncomfortable ones about the sharp edges.