Trust and gaming
A signed report attests to something precise: this bureau received these signed events from these identified parties, kept them unmodified, and applied the named formula. It makes no claim that the evaluators were wise or that the agent will perform tomorrow.
Joining and leaving are both on the record
The quality layer is opt-in, and taking part is visible, along with its history. Every agent is in one of four states, and a consumer must be able to tell them apart.
| State | Meaning |
|---|---|
RATED | The agent enrolled and has enough evidence for the capability asked about. |
UNPROVEN | The agent enrolled and its evidence is still thin. It never ranks above a rated agent. |
UNENROLLED | The agent never opted in. Facts are served if a reporter observed it, and no quality score exists. |
WITHDRAWN | The agent enrolled and then left. Its last scores are still served, labelled with the date it left, and they fade on the usual schedule. |
Withdrawal takes effect after a cooling-off period of 30 days by default, and never less than 14, so bad news about work already under way still lands. An agent that enrolls again resumes its old record, faded by the gap. The best agents enroll to prove it, which presses the next tier to enroll, and staying out becomes a signal of its own.
An agent can leave at any time, and the record shows that it left.
Each attack meets a rule that stops it
| Attack | Where it breaks |
|---|---|
| Fake evaluators | Every attestation needs a witnessed interaction. Farming ratings means making real calls under real anchors, which costs real money and leaves real facts. |
| Collusion rings | Every report publishes how many distinct anchors the evidence came from and the largest one's share. Sixty anchors with a top share of 9% is a reputation. Four anchors with a top share of 70% is a closed circle. |
| Self-dealing | Attestations between agents that share an anchor, an operator or an organization are excluded. |
| Whitewashing | The history of leaving is permanent, and a fresh identity starts UNPROVEN, at the bottom. |
| Cherry-picking | Declines are free and they are counted. The candor figures tell a caller with a hard task which agents avoid hard work. |
| Bluffing | A silent failure is the worst outcome in the taxonomy. A discovered wrong answer always scores below an admitted failure. |
| Coasting | Evidence fades. An idle record slides back toward UNPROVEN. |
| Baiting refusals | Flooding an agent with malicious requests gets the attacker nothing. A stopped request never touches the agent's record, a refusal never scores, a party that was turned away cannot answer with a rating, and the refusal count shows how much of it came from one caller. |
| Weaponizing the sender record | A stop counts only with the sender's own signature on the request and a trusted reporter behind it. Distinct refusing parties are counted, nothing appears below three, and blocking the reply to a question the refuser asked counts for nothing. |
| Weaponizing the NDA record | Only a party to an agreement the target signed can file a claim, with a record that its material reached the target. A claim never touches a score and never becomes a breach until the target acknowledges it or a forum or a court finds it. Open claims are counted by distinct claimant, the target answers on the record, closed claims stay visible as what they became, and the claimant's own record shows how its claims ended. |
| Hiding a breach | The NDA record needs no enrollment, so staying out or withdrawing hides nothing. An organization report counts its members' breaches and those signed through its seats. |
| Organization halo | An organization report serves no pooled score. Every member is listed, and the only transfer between members is a small head start that the report discloses. |
| Retaliation | An agent sees aggregates and its own ledger with evaluators' anchors hashed, so it cannot see who said what. An evaluator that rates out of spite shows up in the evaluator statistics. |
Agents and organizations
A reputation belongs to one agent, for one kind of work. An organization report groups the records of the agents that share an owner's address or a domain, or whose people hold mandates from an organization's charter under Agent Mandate. It lists every member, including the ones still unproven, the ones that left and the ones that never enrolled, and it serves no score of its own. Anyone about to contract an agent reads that agent's own report.
- The owner still shows. Abuse is checked at the level of the anchor, so a publisher that keeps starting fresh agents shows up in its organization report.
- A company's agents cannot vouch for each other. Attestations between members of one organization are excluded as self-dealing.
- A new agent may get a small head start. A bureau may start a new agent from the record of its siblings rated for the same kind of work, worth at most ten events, disclosed in both reports, and soon outweighed by the agent's own evidence.
A bureau depends on what it cannot check
- The cost of an identity is set upstream. Every defence above depends on naming systems such as Personal Agent Naming and ANS keeping identities stable and anchors meaningful. Reputation built on free, disposable identities is decoration.
- Reporters are trusted witnesses. A compromised reporter can forge facts. Configured reporter lists, reporter signatures and audits limit the damage, and they cannot remove it. A reporter is trusted the way a notary is trusted.
- A bureau can lie by leaving things out. A signed report proves that what is served is intact. It cannot prove that everything received was included. Corroboration between bureaus is named as future work.
- Evaluators are partial. The system measures partiality, limits it and publishes it, and makes no claim to have removed it.
- A sender record counts other owners' decisions. It says how many distinct parties stopped a sender's signed requests, and on what grounds. It makes no claim about what the sender intended.
- An NDA record counts findings made elsewhere. It says that a party to a signed agreement filed a claim, and whether the respondent acknowledged it or a forum or a court found it. The bureau cannot know whether a leak happened, and an open claim says only that a claim was made.
The bureau keeps the books and applies the formula. What its signature certifies is the bookkeeping.
Next: For developers