setup can be simpler than migration, no?

I'm reading through the docs now trying to understand how identity works, it seems like a blind spot to me, how to prove you are who you say you are when you move to a new instance. I don't know anyone that gets it right IMO, to allow self-soverign identities to post from multiple services, public-key-pair style. Mostly there's bad tradeoffs there for UX ("reset password" is just way nicer for everyone than "social key recovery") but I was recently swayed by KERI (key event receipt infrastructure) which seems to have thoroughly thought through these things, but it's new enough that no ones building with it that I've heard of.