# Trust Lifecycle

Source: https://docs.openbox.ai/trust-lifecycle/

# Trust Lifecycle

The Trust Lifecycle is OpenBox's governance model. It provides a structured approach to establishing, maintaining, and evolving trust in AI agents through 5 phases.

Access each phase via the tabs in **Agent Detail**.

```mermaid
flowchart LR
    assess["<b>ASSESS</b><br/>Initial<br/>Risk"]
    authorize["<b>AUTHORIZE</b><br/>Configure<br/>Controls"]
    monitor["<b>MONITOR</b><br/>Runtime<br/>Observe"]
    verify["<b>VERIFY</b><br/>Goal<br/>Check"]
    adapt["<b>ADAPT</b><br/>Trust<br/>Evolve"]

    assess --> authorize --> monitor --> verify --> adapt
    adapt -- "Continuous Improvement" --> assess
```

## Phase Overview

| Phase                                       | Tab       | Purpose                   | Key Activities                             |
| ------------------------------------------- | --------- | ------------------------- | ------------------------------------------ |
| **[Assess](/trust-lifecycle/assess)**       | Assess    | Establish baseline risk   | Risk profile configuration, risk profiling |
| **[Authorize](/trust-lifecycle/authorize)** | Authorize | Define allowed behaviors  | Guardrails, policies, behavioral rules     |
| **[Monitor](/trust-lifecycle/monitor)**     | Monitor   | Observe runtime execution | Sessions, metrics, telemetry               |
| **[Verify](/trust-lifecycle/verify)**       | Verify    | Validate goal alignment   | Drift detection, attestation               |
| **[Adapt](/trust-lifecycle/adapt)**         | Adapt     | Evolve trust over time    | Policy suggestions, trust recovery         |

## Trust Score

The Trust Score (0-100) aggregates across the lifecycle:

```
Trust Score = (Risk Profile Score × 40%) + (Behavioral × 35%) + (Alignment × 25%)
```

| Component        | Phase               | Description                                    |
| ---------------- | ------------------- | ---------------------------------------------- |
| **Risk Profile** | Assess              | Inherent risk based on capabilities and access |
| **Behavioral**   | Authorize + Monitor | Compliance with policies and rules             |
| **Alignment**    | Verify              | Consistency with stated goals                  |

## Trust Tiers

The Trust Score maps to Trust Tiers that determine governance strictness:

| Tier          | Trust Score | Label        | Governance Level                     |
| ------------- | ----------- | ------------ | ------------------------------------ |
| **Tier 1**    | 90 – 100    | Trusted      | Minimal constraints, high autonomy   |
| **Tier 2**    | 75 – 89     | Confident    | Standard policies, normal monitoring |
| **Tier 3**    | 50 – 74     | Monitor      | Enhanced controls, frequent checks   |
| **Tier 4**    | 25 – 49     | Restrict     | Strict governance, HITL required     |
| **Untrusted** | 0 – 24      | Decommission | Agent suspended, cannot operate      |

## Lifecycle Flow

### New Agents

1. **Assess** - Configure risk profile
2. **Authorize** - Set up initial guardrails and policies
3. Agent begins operation
4. **Monitor** - Observe sessions and metrics
5. **Verify** - Check goal alignment
6. **Adapt** - Review suggestions, adjust policies

### Ongoing Governance

The lifecycle is continuous. As agents operate:

- Behavioral scores update based on compliance
- Alignment scores update based on goal checks
- Trust Tiers adjust automatically
- Policy suggestions emerge from patterns

## Navigating the Lifecycle

In Agent Detail, click the phase tabs:

- **Assess** - View/edit risk configuration
- **Authorize** - Manage guardrails, policies, behavioral rules
- **Monitor** - View sessions, metrics, telemetry
- **Verify** - Check alignment, view attestations
- **Adapt** - Review suggestions, handle approvals

## Next Steps

Follow the Trust Lifecycle phases in order:

1. **[Assess](/trust-lifecycle/assess)** - Start here to understand your agent's risk profile
2. **[Authorize](/trust-lifecycle/authorize)** - Then configure what your agent is allowed to perform
3. **[Monitor](/trust-lifecycle/monitor)** - Watch your agent operate in real-time
4. **[Verify](/trust-lifecycle/verify)** - Validate goal alignment
5. **[Adapt](/trust-lifecycle/adapt)** - Evolve trust based on behavior