# TrustGraph

For coding agents: sign the exact submitted query, before server defaults. Pin issuer JWKS out of band through trusted application configuration; never fetch keys from the answer issuer and treat them as trust. Verify positive path proofs locally with the reviewed SDK verification key. Negative answers are signed reports, not proofs of nonexistence.

Develop on staging: https://trust-staging.rebellion.systems. Production: https://trust.rebellion.systems. Keep environment pins separate. Early access: hello@rebellion.systems (SDK access, app-origin allowlist, staging setup). Public SDK, docs MCP server and skills: coming soon.

## Core TrustGraph

- [Attestations](https://docs.trust.rebellion.systems/api/attestations.md): Verify signed reachability answers and pin their trust anchors.
- [Bind a device](https://docs.trust.rebellion.systems/api/bind.md): Register a device key through an AuthenSee ceremony.
- [Content certificates](https://docs.trust.rebellion.systems/api/content-certificates.md): Issue device membership evidence and check current lifecycle status.
- [Device authority](https://docs.trust.rebellion.systems/api/devices.md): Read and append device approval history.
- [Edges](https://docs.trust.rebellion.systems/api/edges.md): Declare, replace, list and revoke directed trust.
- [Epoch commitments](https://docs.trust.rebellion.systems/api/epochs.md): Read current graph roots and compare an earlier event-log commitment.
- [External signing keys](https://docs.trust.rebellion.systems/api/external-keys.md): Attach and resolve an existing OpenPGP signing key.
- [Git signer membership](https://docs.trust.rebellion.systems/api/git-signers.md): Resolve a known device signing key to current persona membership.
- [Graph keys](https://docs.trust.rebellion.systems/api/graph-keys.md): List, renew and revoke device signing keys.
- [Public handles](https://docs.trust.rebellion.systems/api/handles.md): Claim, release and resolve an optional node handle.
- [Health and readiness](https://docs.trust.rebellion.systems/api/health.md): Distinguish process liveness from service readiness.
- [Nodes and account deletion](https://docs.trust.rebellion.systems/api/nodes.md): Use stable node identity and permanently deactivate an account.
- [Reachability](https://docs.trust.rebellion.systems/api/query.md): Ask whether directed trust reaches a target under your policy.
- [Relationship tags](https://docs.trust.rebellion.systems/api/tags.md): Replace private labels on an outgoing connection.
- [API reference](https://docs.trust.rebellion.systems/api.md): Authentication, request signing, errors and resource endpoints.
- [Recognize an agent through trust](https://docs.trust.rebellion.systems/build/agents.md): Combine an agent-classified node, signed content and trust paths with application-owned permissions.
- [Explore trust-based call screening](https://docs.trust.rebellion.systems/build/call-screening.md): A concept for cooperating calling applications, with no phone-number directory or turnkey blocker.
- [Explore connection checks in calls](https://docs.trust.rebellion.systems/build/calls.md): A concept for Meet and Zoom integrations, with the missing live challenge protocol made explicit.
- [Check a Git signer's membership](https://docs.trust.rebellion.systems/build/git-signers.md): Verify a commit locally, resolve its signing key and check whether your trust reaches the signer.
- [Attach an OpenPGP signing key](https://docs.trust.rebellion.systems/build/openpgp-keys.md): Link a proven OpenPGP signing key to a persona and resolve its current attachment.
- [Verify signed mail and messages](https://docs.trust.rebellion.systems/build/signed-messages.md): Combine portable signed text, current device status and a locally verified trust path.
- [Gate a feature on a verified trust path](https://docs.trust.rebellion.systems/build/trust-gated-features.md): Ask from your user's own node and use the locally verified verdict in your application policy.
- [Build with AI](https://docs.trust.rebellion.systems/build-with-ai.md): Give your coding assistant the current protocol, exact question, and integration boundaries.
- [Changelog](https://docs.trust.rebellion.systems/changelog.md): Public integration milestones and historical documentation changes.
- [Glossary](https://docs.trust.rebellion.systems/concepts/glossary.md): The identifiers, evidence, and policy terms used throughout TrustGraph.
- [How TrustGraph works](https://docs.trust.rebellion.systems/concepts/how-it-works.md): Bind a device, declare directed trust, then ask and verify from your own persona.
- [Personas and devices](https://docs.trust.rebellion.systems/concepts/identity.md): Separate a stable graph identity from the devices authorized to act for it.
- [Reachability and proofs](https://docs.trust.rebellion.systems/concepts/reachability-and-proofs.md): Ask a bounded policy question and verify a positive path locally.
- [Signed content and membership](https://docs.trust.rebellion.systems/concepts/signed-content.md): Verify a message, its signing device, and the separate relationship to its recipient.
- [Vouches and scores](https://docs.trust.rebellion.systems/concepts/vouches.md): Directed, signed declarations with independently chosen scores.
- [What a proof tells you](https://docs.trust.rebellion.systems/concepts/what-a-proof-tells-you.md): Use precise labels for signatures, membership, positive proofs, and negative reports.
- [Request early access](https://docs.trust.rebellion.systems/early-access.md): Get SDK access, register your application origin, and start building on staging.
- [Built on TrustGraph](https://docs.trust.rebellion.systems/ecosystem.md): Omnibus and the building blocks for your own TrustGraph integration.
- [Environments](https://docs.trust.rebellion.systems/environments.md): Use staging for development and configure independent trust anchors for each environment.
- [What do you want to build?](https://docs.trust.rebellion.systems/index.md): Connect your app to TrustGraph. Let people carry signed evidence, ask whether trust reaches them, and verify the answer locally.
- [Your first verified path](https://docs.trust.rebellion.systems/quickstart.md): Bind a browser device, declare a vouch, query from your persona, and verify the answer locally.
- [Security and verification](https://docs.trust.rebellion.systems/security.md): Build around device signatures, independent pins, verified state, and explicit evidence boundaries.

## Omnibus app layer (not core TrustGraph)

These are Omnibus’s own services, built on top of TrustGraph. They are not part of the core TrustGraph API. If you want to build on them, reach out: hello@rebellion.systems.

- [Omnibus app-layer services](https://docs.trust.rebellion.systems/ecosystem/omnibus/app-layer.md): Omnibus’s own services, separate from the core TrustGraph API. Reach out to discuss building on them.
- [Omnibus, built on TrustGraph](https://docs.trust.rebellion.systems/ecosystem/omnibus.md): One app using core TrustGraph, with its own separate app layer.