| Term | Meaning |
|---|---|
| Persona / node | The stable graph identity that owns directed connections. Identified by graphNodeId. |
| Device / graph key | A P-256 key bound to a persona. Identified by graphKeyId; its lifecycle and current authority govern use. |
| Bind | The AuthenSee-backed ceremony joining a device key to a persona, completed using initiation and completion capabilities. |
| App origin | The exact scheme, host and optional port allowed to receive the bind callback. |
| Vouch / edge | A source persona's directed, signed trust declaration toward a target persona. |
| Trust score | A source-selected value from 0 to 100. An incoming listing uses null when the reader cannot see that score. |
| Scope | A protocol field. New declarations and queries use identity. |
| Policy | The constraints on a reachability query, including minimum score and maximum path length. |
| Reachability | The existence of a non-empty, directed, policy-satisfying path between the selected nodes. |
| Signed read | A fresh device signature over the exact operation and query. |
| Nonce | A fresh value included in a signed request for replay handling. |
| Attestation | The issuer-signed envelope binding the reachability answer and its public inputs. |
| Positive path proof | A zero-knowledge proof that a qualifying path exists in the cited committed graph. |
| Negative report | A signed answer reporting no qualifying path, without a proof of nonexistence. |
| Public inputs | The values exposed and checked alongside a proof, including endpoints and policy. |
| Graph epoch root | A commitment to the graph state used for an answer. The path circuit uses a Poseidon root. |
| Event-log root | A commitment to graph event history. A larger log size alone is not a prefix-continuity proof. |
| JWKS | A JSON Web Key Set. Clients independently pin the Ed25519 issuer keys they trust. |
| Verification key / VK | The circuit key used to check proof bytes; the SDK supplies the pinned path-circuit key. |
| Device chain | A persona's signed, append-only history of device roots, approvals, revocations and resets. |
| Quarantined | A usable persona member that lacks current chain approval for ordinary graph operations. |
| Membership certificate | An issuer-signed statement associating a device public key with a stable persona. |
| Signed content | Normalized text plus a device-signed statement and membership evidence. |
lf-v1 | Text normalization that converts CRLF and CR to LF without trimming or Unicode normalization. |
| Handle | An optional public name resolving to a node through the supported signed lookup flow. |
| Private relationship tag | Owner-accessible relationship metadata, readable by the service and separate from proof policy. |
Start with how TrustGraph works or return to the quickstart.