PrismShop, Use Case Demonstration: Anonymous Shopping with Order History, from Login to Delivery

PrismShop is the integration demonstration of the Prism Ecosystem. It shows what a real service can do with PrismPass from the outside: a complete shopping flow without an account, without a password, and without a customer profile stored anywhere. This technical note follows a single user through the full flow at De Sleutel, a fictitious independent bookshop. The flow covers login without account creation, placing an order, receiving a signed proof of purchase, and having the order delivered without the shop holding a persistent customer record. The shop's database after a completed order contains a commitment hash, a book title, a price, a timestamp, and a server signature. No name, no address, no customer number. The delivery address is stored only until the order is marked as dispatched, then deleted. Order history across multiple devices is possible without a loyalty programme or account, because two devices presenting the same WebAuthn credential produce the same anonymous commitment. The shopping flow has been demonstrated in a working proof of concept as of 28 May 2026 on prismshop.globalsecurity.nu. Screenshots in this document are taken from the live running demonstration. All claims are classified by status: proven in PoC, follows from open standard, or architectural design choice. Part of the Prism Ecosystem. Full technical architecture: The Prism Protocol, Invention Disclosure v20, DOI: 10.5281/zenodo.20029291.