Trust Lifecycle
The Trust Lifecycle is OpenBox's governance model. It provides a structured approach to establishing, maintaining, and evolving trust in AI agents through 5 phases.
Access each phase via the tabs in Agent Detail.
Phase Overview
| Phase | Tab | Purpose | Key Activities |
|---|---|---|---|
| Assess | Assess | Establish baseline risk | Risk profile configuration, risk profiling |
| Authorize | Authorize | Define allowed behaviors | Guardrails, policies, behavioral rules |
| Monitor | Monitor | Observe runtime execution | Sessions, metrics, telemetry |
| Verify | Verify | Validate goal alignment | Drift detection, attestation |
| Adapt | Adapt | Evolve trust over time | Policy suggestions, trust recovery |
Trust Score
The Trust Score (0-100) aggregates across the lifecycle:
Trust Score = (Risk Profile Score × 40%) + (Behavioral × 35%) + (Alignment × 25%)
| Component | Phase | Description |
|---|---|---|
| Risk Profile | Assess | Inherent risk based on capabilities and access |
| Behavioral | Authorize + Monitor | Compliance with policies and rules |
| Alignment | Verify | Consistency with stated goals |
Trust Tiers
The Trust Score maps to Trust Tiers that determine governance strictness:
| Tier | Risk Profile Score | Risk Level | Governance Level |
|---|---|---|---|
| Tier 1 | 0% – 24% | Low | Minimal constraints, high autonomy |
| Tier 2 | 25% – 49% | Medium | Standard policies, normal monitoring |
| Tier 3 | 50% – 74% | High | Enhanced controls, frequent checks |
| Tier 4 | 75% – 100% | Critical | Strict governance, HITL required |
Lifecycle Flow
New Agents
- Assess - Configure risk profile
- Authorize - Set up initial guardrails and policies
- Agent begins operation
- Monitor - Observe sessions and metrics
- Verify - Check goal alignment
- Adapt - Review suggestions, adjust policies
Ongoing Governance
The lifecycle is continuous. As agents operate:
- Behavioral scores update based on compliance
- Alignment scores update based on goal checks
- Trust Tiers adjust automatically
- Policy suggestions emerge from patterns
Navigating the Lifecycle
In Agent Detail, click the phase tabs:
- Assess - View/edit risk configuration
- Authorize - Manage guardrails, policies, behavioral rules
- Monitor - View sessions, metrics, telemetry
- Verify - Check alignment, view attestations
- Adapt - Review suggestions, handle approvals
Next Steps
Follow the Trust Lifecycle phases in order: