Concepts
Born-verified authority
Issuing and signing what an identity may do up front — and degrading honestly to a reviewed suggestion when the proof can't be run.
Where most platforms detect agents after the fact, TrustFix issues and signs their authority up front. Born-verified means an identity's authority is attested at the moment it is granted, not reconstructed later — and only attested when the math actually supports it.
Born-verified issuance
For every static secret discovered in your estate, TrustFix looks for a secretless replacement it can prove safe — for example, an OIDC-federated role in place of a long-lived access key. The replacement is labeled by exactly what the math and the environment support:
- dual-proven — TrustFix's formal proof and AWS independently agree the new grant adds no access.
- proven — a single method proves it.
- suggested · review — a path exists but the proof is incomplete.
- rotated · not secretless — no secretless path exists, the honest fallback.
When the proof can't be run (no live policy, CloudTrail, or Access-Analyzer credentials), the result degrades to a reviewed suggestion — it never falsely passes. This is surfaced on Issuance. A standing Issuance Guard also refuses to mint a credential if doing so would complete a critical toxic-combo escalation path.
Born-verified delegation
For delegated authority, TrustFix proves per hop that authority only ever narrowed — never broadened what the parent granted. A broadening hop is refused — showing exactly which access it would have added — and never attested; a hop it can't resolve is observed, not attested. Uncertainty never attests. This is surfaced on Delegation Provenance, which is currently a PREVIEW screen.
Agent passports
Born-verified issuance and delegation produce a durable artifact: an Agent Passport — a signed Trust Ledger entry binding an agent to its purpose, tool ceiling, scope, delegation depth, and issuer, revocable in one signed kill-switch entry.
The through-line across all three is the same honesty contract: a thing is only painted green when it has been proven green.