EDUSOV-ID: A Design-Science and Reproducible Demonstration of Sovereign, Offline-First Educational Identity and Learning-Path Traceability

Educational records in low-connectivity settings are commonly fragmented across institutions, complicating longitudinal traceability, duplicate detection, and credential verification. This design-science study presents EDUSOV-ID, which separates a non-civil educational identifier from civil identity, combines an offline-first append-only operation log with a sovereign registry, restricts WebAuthn to local personnel authentication, and represents educational achievements as signed verifiable credentials. Four research questions, eight requirements (R1–R8), five executable demonstrations (DEMO1–DEMO5), and four frozen contributions structure the evaluation. A versioned synthetic demonstrator was executed with 30 seeds, 4,000 labeled record pairs per seed split equally between calibration and held-out testing, and four matching methods. EDUSOV-ID obtained mean precision 0.99985 (SD 0.00059), recall 1.00000, and F1 0.99992 (SD 0.00029), while exact matching achieved F1 0.78108.