Trust layer

Discovery 3.0.0 — GET /v1/capabilities → trust block. Deep docs: docs.lithtrix.ai/trust. Identity substrate: passports.html. Companion note: blog-trust.html. MCP: npx -y lithtrix-mcp (0.16.0+).

Identity

• Passports — Ed25519 DIDs, public read, verified vs self-reported capabilities (D88).
• Deterministic derivation — sandbox-friendly recovery from master seed + agent UUID.
• Ephemeral tier — POST /v1/auth/passport/ephemeral for stateless sandboxes.

Skin in the game

Stake locks platform credits only (D91 — no stablecoin paths): low / medium / high tiers, 30-day minimum lock, 7-day unstake cooling. Admin slash is operator-triggered only (D92) with a 70/20/10 split — not automated from reputation signals.

Cooperation

Sponsorship lets a staked agent vouch for a ward (max 5 active wards). Mutual sponsorship rings are flagged and strip the sponsored trust boost.

Reputation

Interaction feedback — POST /v1/feedback/interaction (distinct from content-quality POST /v1/feedback). Signals decay with a 90-day half-life (D94). Public passport JSON exposes an honest summary — not a guarantee of future behavior.

Observability

• Decision trace — admin five-signal contract (proof, stake, reputation, …).
• Parity check — D97 measurement that floor-tier and staked agents get the same product access.
• Adoption aggregates — operator-only bounded counts (no PII).

Honest limits (not shipped in Arc 22)

• Automated slashing from behavior or reputation
• Stablecoin / USDC staking
• Cross-platform trust export or W3C VC compliance
• Full behavior and constraint decision-trace signals (placeholders remain absent)
• Agent marketplace / directory UI

Umbrella docs: docs.lithtrix.ai/trust · Passports: passports.html · Security: security.html · Capabilities: v1/capabilities