trqp-assurance-hub

Documentation Index

This hub is designed to be role-first: you should be able to find what you need without reading every file.

Choose your path

Operators (registry / trust list operators)

You are responsible for running a service and producing assurance evidence.

• Start with: Assurance levels (AL1–AL4)
• Then: Evidence & artifact expectations matrix
• Worked bundles:
  • AL3 evidence bundle (example)
  • AL4 evidence bundle (example)
• Certification baseline: Certification baseline
• Ayra Trust Network: Ayra submission checklist

Ayra Trust Network operators

You are preparing to join or are operating within the Ayra Trust Network.

• Pre-certification crosswalk: Ayra control mapping and submission checklists
• CTS profile: profiles/ayra_baseline.yaml (in trqp-conformance-suite)
• TSPP profile: TSPP Ayra baseline (in TRQP-TSPP)
• Ayra TRQP Profile: https://ayraforum.github.io/ayra-trust-registry-resources/
• Ayra Implementers Guide: https://ayraforum.github.io/ayra-trust-registry-resources/guides/

Certifiers / assessors

You are evaluating evidence, validating conformance, and closing remediation.

• Canonical definitions: Assurance levels (AL1–AL4)
• What to ask for: Evidence & artifact expectations matrix
• Example submissions:
  • AL3 evidence bundle (example)
  • AL4 evidence bundle (example)
• Program scaffolding: Certification baseline

Implementers / tooling integrators

You are integrating endpoints, schemas, and validation into pipelines.

• Getting started: Quickstart
• The workflow: Combined assurance guide
• Narrative: Operational Stack narrative
• Discovery: Trust Registry reference service
• Contracts: Machine-readable assurance profiles
• Schemas: Schemas
• Example payloads: Examples
• Error handling: Error states

Governance / policy designers

You are translating governance intent into implementable and auditable artifacts.

• Canonical model: Assurance levels (AL1–AL4)
• Evidence structure: Evidence & artifact expectations matrix
• Certification baseline: Certification baseline
• Roadmap: Roadmap

Canonical references

• TSAM (Trust Systems Assurance Method)
• TRACE ↔ TSAM relationship
• Assurance levels (AL1–AL4)
• Evidence & artifact expectations matrix
• Combined assurance workflow
• Operational Stack narrative
• Trust Registry reference service
• Machine-readable assurance profiles
• Ayra Trust Network crosswalk

GRID implementers (directory operators)

• Profile: ../profiles/grid-profile.md
• Verifier workflow: how-to-verify-grid.md
• Crosswalk to GTR: grid-gtr-crosswalk.md

Authoritative directories (SAD-1)

SAD-1 is the registry-agnostic profile that lets the TRQP ecosystem evaluate authoritative directories, including sovereign registries.

• Profile: ../profiles/sad-1-profile.md
• End-to-end workflow: guides/directory-assurance-workflow.md
• Strategy note: strategy/authoritative-directories.md

Reference

• UNTP Digital Identity Anchor (DIA)

Supply chain integrity

• OpenSSF-aligned reference: docs/reference/openssf-supply-chain.md

Experimental support

TRQP Assurance Hub includes an experimental DeDi profile to map decentralized directory artifacts into the Hub’s assurance workflow.

• Profile: profiles/dedi-experimental-profile.md
• Upstream: https://github.com/LF-Decentralized-Trust-labs/decentralized-directory-protocol

Governance

• Documentation freshness policy: docs/governance/README.md

This site is open source. Improve this page.