Augenmaß

Augenmaß examines over-asking: services asking the European Digital Identity Wallet (EUDI Wallet) for too much.

A service should ask the wallet only for what its purpose needs. Augenmaß is a demonstration and research project run by Quellkern e.U., a sole proprietorship in Hochfilzen, Austria. The name is German for a trained sense of proportion.

What is over-asking?

Your wallet is a phone app that holds official proofs in digital form, such as a digital ID card or a proof of age. A service that asks you to show something from it is called a relying party. It registers what it will ask for and why. Over-asking is asking for more than that purpose needs. Extra data can link you across services, and the service must store and secure it.

Purpose: check customer is over 18 The gap between the columns is the over-ask. This is one example purpose, not a verdict on any service. Purpose: check customer is over 18 What the purpose needs: over 18, yes What the request asks for: date of birth, name (over-ask) Purpose: check customer is over 18 The gap between the columns is the over-ask. This is one example purpose, not a verdict on any service. Purpose: check customer is over 18 What the purpose needs: over 18, yes What the request asks for: date of birth, name (over-ask)
The gap between the columns is the over-ask. This is one example purpose, not a verdict on any service.

What changes, and from when?

Commission Implementing Regulations (EU) 2026/1730 and 2026/1731 have been in force since 11 August 2026. The amended registration rules for relying parties apply from 24 December 2026. From then each Member State must have authorised at least one issuer of registration certificates. A registration certificate is the document that states what a service registered to ask for. It is issued automatically after registration.

The Workbench is available now

The Workbench is open-source software under the Apache License 2.0. It has a command-line program (you type commands in a terminal) and an add-on that lets an AI coding assistant use it. The Workbench compares what a registration or request asks for with its stated purpose, attribute by attribute. Its example purposes are judgment calls.

About the Workbench

Workbench and board on stage at EUDI ON 2026

Our talk at EUDI ON 2026, the closing event of the EUDI Wallet Hackathon 2026, in Café Moskau, Berlin, on 25 June 2026. It shows the build of that day as it was then: the board, a Claude Code session and a wallet flow. 5 minutes 9 seconds, English captions available. Recording published by SPRIND.

Official recording

What we built at the hackathon: the board

The board compares, entry by entry, the purpose a service declared with the attributes it listed. We built it for the EUDI Wallet Hackathon 2026 and ran it on test entries from the German sandbox registry, crawled on 7 July 2026. It is a demo. Open the board

We are preparing a list of data per purpose

For each common purpose, we are writing down which attributes it needs and why, with sources (a necessity baseline). The work is in progress. Someone outside the project reviews each list before we publish it.

Who runs the project

Augenmaß is run by Reza Shokri, owner of Quellkern e.U., a registered sole proprietorship for data processing and information technology services in Hochfilzen, Austria. He built the Workbench and the board and presented them at EUDI ON 2026, the closing event of the EUDI Wallet Hackathon 2026. Augenmaß won the Developer Tools & Community Award, one of five track winners.

Contact

Write to [email protected] with questions, corrections and statements. Send security reports privately to [email protected]. You can encrypt mail with our public key. English or German is fine.