What this is, and what it is not.

Nothing here is legal, security or compliance advice. A grade from the trust grader summarises a handful of checks against a public endpoint; it is not a certification and not an endorsement.

Useful, and not guaranteed. The grader reads what an endpoint publishes — a passing grade means those checks passed, not that the agent behind it is safe.

Product and company names are the trademarks of their owners. Naming one is descriptive: it identifies what is being compared or scanned, and implies no affiliation or endorsement.

Records you generate are yours. Self-hosted, they never reach us; hosted, we hold them for you and hand them back on request in the format they were written in.

The signed formats are published with cross-language vectors. Nothing about the record format is proprietary, because a format only you can read is not evidence.

[email protected]. Legal notices to [email protected].