{
  "spec": "agentlair-l4-behavioral-trust",
  "version": "0.1.0",
  "date": "2026-04-18",
  "status": "draft",
  "url": "https://agentlair.dev/spec",
  "sections": {
    "problem": "Identity ≠ Trust. L1-L3 solve access control. L4 solves behavioral trust across organizational boundaries.",
    "model": {
      "signals": [
        "tool_call_patterns",
        "resource_access_frequency",
        "declared_intent_deviation",
        "temporal_anomalies"
      ],
      "scoring": {
        "range": [
          0,
          1000
        ],
        "dimensions": {
          "behavioral": {
            "max": 250,
            "signal": "observation_volume"
          },
          "consistency": {
            "max": 250,
            "signal": "recency"
          },
          "reputation": {
            "max": 250,
            "signal": "topic_diversity"
          },
          "transparency": {
            "max": 250,
            "signal": "shared_observation_ratio"
          }
        },
        "tiers": {
          "untrusted": [
            0,
            249
          ],
          "provisional": [
            250,
            499
          ],
          "trusted": [
            500,
            749
          ],
          "verified": [
            750,
            1000
          ]
        }
      }
    },
    "protocol": {
      "aat": {
        "algorithm": "EdDSA",
        "key_type": "OKP",
        "curve": "Ed25519",
        "format": "JWT"
      },
      "endpoints": {
        "jwks": "/.well-known/jwks.json",
        "openid": "/.well-known/openid-configuration",
        "did_web": "/agents/{name}/.well-known/jwks.json",
        "issue": "/v1/tokens/issue",
        "introspect": "/v1/tokens/introspect",
        "telemetry": "/v1/telemetry/submit",
        "trust": "/v1/trust/{agentId}",
        "audit": "/v1/audit"
      }
    }
  }
}