The VCs appear to be orthogonal/separate from any of the app data storage/interaction layer, and I see they primarily use the JWT variant of VCs anyway. The data storage/interaction part is listed as DAG-CBOR, so no RDF involved. But aside from all these protocols there's a simple JSON canonicalization RFC here people should use instead of rolling their own, imo: https://www.rfc-editor.org/rfc/rfc8785