That still doesn't solve the question of identity. For example, I could generate a GPG key for 'Johnny Daniels' and sign a loan. Without some sort of way to validate some traceable information about this person, having a signed document doesn't really mean anything. Or am I missing something?