Trust SDK

Overview

The public Python and TypeScript clients fail closed on missing authorization, inactive state, malformed responses, redirects, and transport errors. The CLI evaluates a declared subset of AATS and can monitor current Trust state.

• Keep bearer credentials server-side.
• Use HTTPS for remote verification.
• Match agent, action, resource, and policy in verification requests.
• Treat the 11-domain manifest result as self-assessment only.

Production checklist

• Keep credentials in a server-side secret store.
• Set explicit cost, latency, privacy, provider, and regional constraints.
• Capture route and evaluation evidence for incident review.
• Test timeouts, cancellation, fallback, and denied-policy paths before rollout.