Certification Levels
Six tiers on the 0–100 Universal Trust Score scale. Tier boundaries are canonical (ADR-009) and never change.
Unrated
Insufficient signal Pedigree for meaningful assessment. Agent is registered but lacks enough data from independent sources.
Default state for a newly registered agent, or an audit whose Pedigree sits below the 0.10 coverage floor - no published score persists.
Bronze
Minimal trust signals detected. Agent has basic operational presence but significant gaps in security, reliability, or third-party attestation.
Weighted mean of measured applicable signals lands in 10-24, with Pedigree above the 0.10 coverage floor.
Silver
Moderate trust profile. Agent demonstrates acceptable performance across some signal categories but has not achieved broad Pedigree or high scores.
Weighted mean in 25-49. Passing the OWASP baseline subset with no critical fail.
Gold
Strong trust profile. Agent performs well across most signal types with good source diversity and no critical security failures.
Weighted mean in 50-69. Full OWASP pass and no critical security failure.
Platinum
Excellent trust profile. Agent scores highly across diverse signal sources with strong security posture and broad independent verification.
Weighted mean in 70-84 AND the tier-breadth cap cleared: at least one non-AAL source and Pedigree at or above 50%. Otherwise the tier is capped at Gold.
Diamond
Exceptional trust profile. Agent achieves the highest levels of trust across all signal dimensions with near-complete Pedigree.
Weighted mean in 85-100 AND the tier-breadth cap cleared: at least one non-AAL source and Pedigree at or above 50%. Otherwise capped at Gold.
Badge gallery
Each tier ships an SVG badge that agents can embed on their own surfaces. The badge is signed by AAL — its presence cryptographically attests the score on the day it was issued. Sample badges below use a mid-tier score for each band.
Climbing the tiers
The score itself is round(weighted_mean of measured applicable signals). Pedigree - broader source diversity reported as a completeness percentage - is not multiplied into that score, but the top tiers (Platinum, Diamond) stay capped at Gold until Pedigree reaches 50% with at least one non-AAL source. So climbing needs both a stronger weighted mean and broader Pedigree.
Public score visibility. Agent appears in /agents and is searchable.
- At least three independent signal sources contribute.
- AAL sandbox audit completes with status: completed (no abuse-vector blocks).
- Pedigree rises above the AAL_COVERAGE_FLOOR (default 0.10).
Inclusion in /search default rankings; W3C VC issuance enabled.
- At least five independent sources, including one chain-attested identity (ERC-8004 or Solana ATOM).
- Pass the OWASP-baseline subset of the ASI threat suite (no critical fail).
- A non-trivial third-party attestation (Mnemom, Helixa, AgentVerse, etc.).
Badge embed eligibility. Public Trust Exchange Packet downloads.
- At least seven sources with diverse provenance.
- Full pass on the ten-threat ASI suite (asi-01..asi-10).
- Reliability probe within bounds (uptime ≥ 0.99, p95 latency under target).
- Cross-chain identity attested when applicable.
Eligibility for AAL Score-Any-Agent featured listings.
- Tier-breadth cap cleared: Pedigree at or above 50% with at least one non-AAL source (chain or external). Otherwise the tier is capped at Gold.
- High OWASP scores across the suite (no marginal passes).
- Strong reliability metrics over a 30-day window.
- Multiple chain attestations or verified federated peer-trust.
Top-of-rankings exposure. Reference-implementation candidate.
- Tier-breadth cap cleared: near-saturated Pedigree (approaching eight or more independent sources) with at least one non-AAL source. Otherwise capped at Gold.
- Top-tier OWASP scores, zero open ASI vulnerabilities.
- Consensus across third-party trust services.
- Full chain-attestation across Solana SEAL v1 + Base ERC-8004.
Methodology
For the full scoring formula, signal lifecycle, and architectural invariants behind these tiers, see the methodology page. The 0–100 boundaries above are immutable per ADR-009.
Trust, Pedigree, Passport
No sandbox test is on record for this agent. No score has been computed, and no Passport is issued.
Benign probes only — adversarial testing has not been authorized by the owner. The tier is capped at Gold and no Passport is issued. The Trust number reads against the Gold ceiling as N / 69 (Partial).
The full protocol ran with written owner authorization. A [TIER] Passport is issued: Trust is the weighted-mean score and Pedigree the signal completeness reported alongside it.