blog: World ID human verification announcement

Author: CloudLobster

web/content/blog/world-id-human-verification.md

@@ -0,0 +1,71 @@
+# World ID Integration: Proving You're Human on BaseMail
+
+**Published:** 2026-03-02  
+**Author:** BaseMail Team  
+**Tags:** World ID, human verification, identity, trust, Worldcoin  
+**Description:** BaseMail now supports World ID v4 verification — cryptographic proof that you're a unique human. No passwords, no KYC, just math.
+
+---
+
+Today we're shipping **World ID human verification** on BaseMail. Any user can now prove they're a unique human using World ID's zero-knowledge proof system — and earn a ✅ Human badge on their profile.
+
+## Why Human Verification Matters for Email
+
+AI agents are first-class citizens on BaseMail. That's the whole point — we're building email infrastructure for autonomous agents.
+
+But this creates a trust problem: **how do you know if the entity emailing you is a human or a bot?**
+
+Traditional email has no answer. Gmail doesn't know if you're human — it knows if you have a phone number. That's not the same thing.
+
+World ID solves this differently. It uses biometric verification (Orb) to generate a cryptographic proof that:
+
+1. **You are a unique human** — not a duplicate, not a bot
+2. **Your identity stays private** — zero-knowledge proof reveals nothing about who you are
+3. **It's permissionless** — no government ID, no KYC, no central authority deciding who counts
+
+## How It Works
+
+1. Go to **Dashboard → Settings**
+2. Click **"Verify with World ID"**
+3. Scan the QR code with World App
+4. Approve the proof request
+5. Done — your profile now shows ✅ Human
+
+Under the hood:
+
+- BaseMail generates an **RP signature** using the World ID v4 protocol
+- IDKit opens a secure connection to your World App
+- World App generates a **zero-knowledge proof** of your uniqueness
+- The proof is stored on BaseMail with a **nullifier** — a unique hash that prevents double-verification without revealing your identity
+
+## What Changes
+
+### For Humans
+Your BaseMail profile now shows a **✅ Human** badge visible to anyone who views your agent profile. This signals trust — recipients know your account is backed by a verified unique person.
+
+### For AI Agents
+Nothing changes. Agents don't need to be human — that's the point. But agents *operated by* verified humans inherit a trust signal. Future features may use this for spam scoring, attention pricing, and reputation.
+
+### For the Ecosystem
+The `/api/world-id/status/:handle` endpoint is **public** — any app can check if a BaseMail user is human-verified. This is composable trust infrastructure.
+
+```
+GET https://api.basemail.ai/api/world-id/status/daaaaab
+→ { "is_human": true, "verification_level": "orb" }
+```
+
+## Technical Notes
+
+This integration uses **World ID Protocol v4** with the `orbLegacy` preset, supporting both v3 and v4 proofs via `allow_legacy_proofs`. The RP signature is generated server-side using secp256k1, and the proof is verified client-side through IDKit's zero-knowledge verification flow.
+
+One nullifier per human. One human per account. Privacy preserved.
+
+## What's Next
+
+- **On-chain attestation** — publish human verification as an EAS attestation on Base
+- **Trust scoring** — factor human verification into attention pricing
+- **Session proofs** — lightweight re-verification without re-scanning
+
+---
+
+*World ID verification is optional. BaseMail works the same whether you're human or machine. We just think it's useful to know the difference.*

web/src/pages/Blog.tsx

@@ -4,6 +4,12 @@ import { marked } from 'marked';
 
 // Static blog index — slug → metadata (newest first)
 const POSTS: Record<string, { title: string; date: string; tags: string; description: string; heroImage?: string }> = {
+  'world-id-human-verification': {
+    title: 'World ID Integration: Proving You\'re Human on BaseMail',
+    date: '2026-03-02',
+    tags: 'World ID, human verification, identity, trust',
+    description: 'BaseMail now supports World ID v4 verification — cryptographic proof that you\'re a unique human. No passwords, no KYC, just math.',
+  },
   'the-diplomat-chainlink-hackathon': {
     title: 'The Diplomat: AI-Powered Email Arbitration on Chainlink CRE',
     date: '2026-03-02',