browsec/trustlab/README.md

31 lines
1.0 KiB
Markdown

# TrustLab
TrustLab is the browser-neutral executable model of Browsec's trust-plugin
protocol. It currently runs under Node.js without external dependencies, but
plugins receive only portable JavaScript values and TrustLab capabilities.
The initial runner separates two phases:
1. Evidence plugins independently inspect the same immutable TLS facts. Their
attributed results are appended deterministically to the journal.
2. Decision plugins inspect the sealed evidence view in configured order. The
first authorized Boolean verdict is terminal. Browsec's immutable built-in
handler finalizes that result or supplies the safe fallback.
Run:
```sh
npm test
npm run demo
```
## Current protocol boundary
Plugins may return evidence, warnings, and a scoped Boolean trust verdict. They
cannot access Node.js facilities through the protocol, mutate TLS facts or
journal entries, or perform browser actions.
This first slice intentionally omits persistence, package signatures,
interactive UI, community identities, networking, and real X.509 parsing.