TDIP.

One type. IdentityData enum: Human (display name, KYC tier, controlled machines) or Machine (capabilities, delegation scope, controller DID, reputation, agent id, is_seed_agent).

tenzro identity register --name "Alice" --identity-type human
tenzro identity register \
  --name "trading-bot-1" \
  --identity-type machine \
  --controller did:tenzro:human:... \
  --capabilities inference,settlement

DelegationScope {
  max_transaction_value: 1000 TNZO,
  max_daily_spend:      10_000 TNZO,
  allowed_operations:   [Transfer, Inference],
  allowed_contracts:    [...],
  allowed_protocols:    [Mpp, X402],
  allowed_chains:       [Tenzro, Ethereum],
  time_bound:           expiry,
}

Revoking a controller cascades to controlled machines via the IdentityRegistry. Remote nodes apply revocation through apply_remote_revocation().