What is not in this table

Everything the provider sites measured. The counts on the comparison matrix↗ and on the sites page↗ are read from each site's published index at sync time, and the state chips there link into that site's ledger, not this one. The hub does not hold a second copy of anybody's claims, because a copy is a thing that can drift. How the sync works →↗

PAGE /patterns/ — The four client-side credential patterns

title: The four client-side credential patterns description: "Client side is not one thing. It is four patterns that differ in where the credential lives and what bounds it — plus a second axis, what your tool keeps, and the intersection of the two." lead: "\"Client side\" is not one thing. It is four patterns, and they differ in exactly two ways: where the credential lives, and what bounds it. Every provider site in this family answers with one of these, per product, because a vendor with several products has several answers." order: 10 toc: true provenance: commit: 7d1916aca5f3 date: 8 September 2026 note: "Canonical here. A provider site answers these rather than redefining them."