TrustLab is the browser-neutral executable model of Browsec's trust-plugin protocol. It currently runs under Node.js without external dependencies, but plugins receive only portable JavaScript values and TrustLab capabilities.

The initial runner separates two phases:

Evidence plugins independently inspect the same immutable TLS facts. Their attributed results are appended deterministically to the journal.
Decision plugins inspect the sealed evidence view in configured order. The first authorized Boolean verdict is terminal. Browsec's immutable built-in handler finalizes that result or supplies the safe fallback.

Run:

npm test
npm run demo

Current protocol boundary

Plugins may return evidence, warnings, and a scoped Boolean trust verdict. They cannot access Node.js facilities through the protocol, mutate TLS facts or journal entries, or perform browser actions.

This first slice intentionally omits persistence, package signatures, interactive UI, community identities, networking, and real X.509 parsing.