> ## Documentation Index
> Fetch the complete documentation index at: https://docs.truthlocks.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Compute Trust Score

> Recompute the trust score for a machine agent based on current behavioral signals

Triggers an on-demand recomputation of the trust score for a specific agent. The score is derived from multiple weighted factors including anomaly rate, uptime history, delegation depth, and receipt volume. Use this endpoint after a significant event (key rotation, policy violation, attestation burst) to ensure the score reflects the agent's current posture.

Trust scores range from `0.0` (no trust) to `1.0` (full trust) and are used by policy engines, witness selection, and delegation gates across the platform.

### Authentication

Requires `X-API-Key` header or Bearer JWT token. Tenant-scoped via `X-Tenant-ID`.

### Path Parameters

<ParamField path="agent_id" type="string" required>
  The unique identifier of the machine agent whose trust score should be
  recomputed. Format: `maip-agent:ULID`.
</ParamField>

### Request Body

<ParamField body="include_history" type="boolean" default="false">
  When `true`, the response includes the full factor history used during
  computation. Useful for debugging score changes but increases response size.
</ParamField>

### Response

<ResponseField name="agent_id" type="string">
  The agent identifier that was scored.
</ResponseField>

<ResponseField name="score" type="number">
  The computed trust score as a float between `0.0` and `1.0`.
</ResponseField>

<ResponseField name="factors" type="object">
  Breakdown of the individual factors that contributed to the score.

  <Expandable title="Factor fields">
    <ResponseField name="factors.anomaly_rate" type="number">
      Ratio of anomalous events to total events in the scoring window. Lower is better.
    </ResponseField>

    <ResponseField name="factors.uptime" type="number">
      Agent availability ratio over the last 30 days. `1.0` means 100% uptime.
    </ResponseField>

    <ResponseField name="factors.delegation_depth" type="integer">
      Current depth of the agent's delegation chain. Deep chains reduce trust.
    </ResponseField>

    <ResponseField name="factors.receipt_count" type="integer">
      Total number of valid receipts the agent has accumulated.
    </ResponseField>
  </Expandable>
</ResponseField>

<ResponseField name="computed_at" type="string">
  ISO 8601 timestamp of when the computation completed.
</ResponseField>

### Score Factor Weights

| Factor             | Weight | Description                                |
| :----------------- | :----- | :----------------------------------------- |
| `anomaly_rate`     | 30%    | Penalizes agents with high anomaly ratios  |
| `uptime`           | 25%    | Rewards consistent availability            |
| `delegation_depth` | 20%    | Deeper chains reduce trust proportionally  |
| `receipt_count`    | 25%    | More receipts indicate established history |


## OpenAPI

````yaml mint-openapi.yaml POST /v1/trust/compute
openapi: 3.0.3
info:
  title: Truthlocks API
  description: >
    Truthlocks is a universal verification infrastructure for documents,
    credentials, and digital assets.

    This specification defines the canonical API for interacting with Truthlocks
    services.


    ## Base URLs

    - **Production**: `https://api.truthlocks.com`

    - **Sandbox**: `https://sandbox-api.truthlocks.com`


    ## Authentication

    - **API Keys**: Use `X-API-Key` header for machine-to-machine operations

    - **Bearer Tokens**: Use `Authorization: Bearer <jwt>` for user-initiated
    operations


    ## Tenant Identity

    In production, tenant identity is derived from the authenticated context
    (API key or JWT).

    The `X-Tenant-ID` header is ignored in production to prevent spoofing.
  version: 1.0.0
  contact:
    name: Truthlocks Support
    url: https://truthlocks.com/support
    email: support@truthlocks.com
servers:
  - url: https://api.truthlocks.com
    description: Production API
  - url: https://sandbox-api.truthlocks.com
    description: Sandbox Environment
security:
  - APIKey: []
tags:
  - name: Authentication
    description: API key and token management
  - name: Issuers
    description: Issuer registration and trust management
  - name: Keys
    description: Cryptographic key management for issuers
  - name: Attestations
    description: Attestation lifecycle (mint, revoke, supersede)
  - name: Verification
    description: Attestation verification and proof bundles
  - name: Governance
    description: Issuer governance workflows (admin only)
  - name: Identity
    description: Organization, user, and role management
  - name: Audit
    description: Audit event queries
  - name: Platform
    description: Platform administration (super admin only)
  - name: Platform Review
    description: Staff review workflows for issuer applications
  - name: Tenant Console
    description: Tenant profile and lifecycle endpoints
  - name: Health
    description: Service health and readiness endpoints
  - name: Risk
    description: Risk signal ingestion and fraud detection
  - name: Risk Enforcement
    description: Risk enforcement actions — block, challenge, quarantine, and configuration
  - name: Billing
    description: Billing, subscription, and addon management
  - name: Machine Identity
    description: >-
      Machine Agent Identity Protocol (MAIP) — agent registration, sessions,
      trust, witness, compliance, orchestration, and observability
externalDocs:
  description: Transparency read-only API (separate service spec)
  url: >-
    https://github.com/truthlocks/truthlock/blob/main/docs/transparency/openapi.yaml
paths:
  /v1/trust/compute:
    post:
      tags:
        - Machine Identity
      summary: Recompute Trust Score
      description: >
        Forces an immediate recomputation of the agent trust score using the
        latest

        signals. Returns the individual contributing factors.
      operationId: maip.agents.trust.compute
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
                - agent_id
              properties:
                agent_id:
                  type: string
                  description: MAIP agent identifier (e.g. maip:a0000000:01abc...)
                include_factors:
                  type: boolean
                  default: true
                  description: Whether to include individual factor breakdown
      responses:
        '200':
          description: Recomputed trust score
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MaipTrustScore'
        '401':
          description: Authentication required
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
        '404':
          description: Agent not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
        '429':
          description: Rate limit exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
      security:
        - APIKey: []
components:
  schemas:
    MaipTrustScore:
      type: object
      properties:
        score:
          type: number
          format: float
          minimum: 0
          maximum: 1
        factors:
          type: object
          additionalProperties: true
        deltas:
          type: object
          additionalProperties: true
        computed_at:
          type: string
          format: date-time
    ErrorEnvelope:
      type: object
      required:
        - code
        - message
        - http_status
      properties:
        code:
          type: string
          description: Machine-readable error code
          enum:
            - AUTH_REQUIRED
            - AUTH_INVALID
            - PERMISSION_DENIED
            - TENANT_IDENTITY_UNVERIFIED
            - NOT_FOUND
            - VALIDATION_ERROR
            - CONFLICT
            - PAYLOAD_TOO_LARGE
            - RATE_LIMIT_EXCEEDED
            - QUOTA_EXCEEDED
            - SERVICE_UNAVAILABLE
            - INTERNAL_ERROR
        message:
          type: string
          description: Human-readable error message
        http_status:
          type: integer
          description: HTTP status code
        retry_after_ms:
          type: integer
          description: Milliseconds to wait before retrying (for rate limits)
        details:
          type: object
          description: Additional error context
      example:
        code: AUTH_REQUIRED
        message: Authentication required
        http_status: 401
  securitySchemes:
    APIKey:
      type: apiKey
      in: header
      name: X-API-Key
      description: API key for machine-to-machine authentication

````