the service doesn't see the document itself on subsequent verifications but it does receive a signed verification payload containing derived fields in plaintext

the service doesn't see the document itself on subsequent verifications but it does receive a signed verification payload containing derived fields in plaintext currently. No ZK proofs at this stage but agreed it would be a great future improvement!