Concepts

Attestation & decay

Trust treated as something that decays — an exponential half-life per identity class and an operational re-attestation worklist.

TrustFix treats trust as something that decays. A signed attestation that an identity is behaving as expected is true at the moment it is made — and a little less true with every hour that passes. Attestation makes that explicit and gives you a worklist to keep it fresh.

Exponential decay, tuned by identity class

Each identity's freshness follows a deterministic exponential half-life. The half-life is tuned to how fast that class of identity actually churns: AI agents and MCP servers decay fastest (they change constantly), while IAM roles and certificates decay slowly. The result is a per-identity decay bar and a next-due deadline rather than a one-size-fits-all expiry.

A re-attestation worklist, not a dashboard

The Attestation Clock (/attestation-clock) presents this as an operational worklist sorted by urgency — hours until each identity crosses critical. Work it like a queue:

• Filter by Overdue, crossing-critical-in-7-days, or status band.
• Project the clock forward (+6h / +24h / +7d) to see what is about to go stale.
• Re-attest a single identity or in bulk, which writes a new real signed receipt into the Trust Ledger.

Identities that have never had a signed receipt say so honestly rather than show a green clock. The screen reads GET /api/attestations and writes with POST /api/attestations.