# Trust Establishment Handoff

## Question Areas

### History

**1. How did the DIF Trust Establishment work get started?**

- IIW last April
- Considerations for establishing trust for KYC credentials
- Concept of "Circle of Trust" from Workday's approach
- Trinsic and Indicio were interested
- There was some work at ToIP but Trinsic / Indicio were interested in coming over to DIF to work on it.

**2. What did you hope to accomplish with this standard??**

- Common way to represent who can be trusted for what
- Specific case was for credentials in Gabe's mind
- Daniel was interested in using for sentiment. Perhaps you trust an individual 70% of the time based on prior interactions. Maybe an online merchant delivers on time 70% of the time.
- Indicio was intersteed in having a language to process trust. Perhaps a more expressive way to make decisions on Trust.
- A flexible format that can fit a wide number of use cases.

**3. What is the relevance for TBD/Block??**

- We need a way to represent a way what verifiers trust and TE is a way to define that.
- There may be trust models other organizations define that we need to interact with.
- e.g., all DMVs come up with a model for how drivers licenses are going to be accepted across all states.
- for tbDEX we could have different trust lists for PFIs, etc. Specifically for KYC, it could be a way to fail fast. If the KYC credential isn't from an entry in the trust list, fail quick.
- tbDEX the sentiment approach could be used provided varying degrees of trust for certain PFI credentials. If this was published, anyone interacting with DID identified parties could more seamless/automated.
- while subject to potential sybil attacks, usiung this on an individual level to specify trust for another did-relative entity,

**4. Discuss proposal to reduce formations from 5 down to 1**

- Originally, it was clear that one formation could do it all. The discussion at the time was regarding human-readability vs. machine readability.
- Using multiple formations might allow it to be simpler for human interpretability.
- However, if we are focusing on machine readability, then it may make sense to collapse to one.
- One consideration is the size of the data. Some cases might be significantly smaller than another (e.g., trust list for all libraries in the U.S.).

Pros/Cons, Trade-offs, considerations, etc.

### DIF

**1. What are the expectations from DIF in terms of Work Item Owners?**

_For example, specific reporting requirements, activities that happen periodically throughout the year, etc._

Process is you tell chairs on Tuesday bi-weekly telling them you want to progress a standard.

**2. Is there a sense of how long DIF Standards should remain in Strawman / Draft status?**

Totally up to the group to determine when we're ready to advance between states. The DIF Chairs weigh in on standards.

**3. Are there similar work items being undertaken by other standards bodies that I ought to be involved with / closely tracking?**

- Talk to Andor about where there's overlap with ToIP work streams.
- Juan is a good chair to work with

### Participants

**1. Can you tell me a little about the key participants who have been involved?**

- Sam Curren
- Mike Ebert (Indicio)
- Andor Kesselman
- Keith Kowal (formerly PM at Workday, now at Hedera)
- Jen Schreiber
- Simon Nazarenko (maybe Indicio)
- Steve Magennis

**2. Are there considerations to keep in mind for the individual participants or the organizations they represent?**

## Resources
- [Work item definition](https://github.com/decentralized-identity/claims-credentials/blob/main/work_items/trust_establishment.md)
- [Meeting notes](https://hackmd.io/a50I9MlkRVOQJOYgf7b3hA?both)
- [Spec](https://identity.foundation/trust-establishment)
- Repos
- [Trust Establishment](https://github.com/decentralized-identity/trust-establishment)
- [Credential Trust Establishment](https://github.com/decentralized-identity/credential-trust-establishment)
- [ToIP and DIF joint call](https://hackmd.io/jKbIc4q7SA6c3AX0-T3kog?both)
- [Manu's Work](https://docs.google.com/document/d/1TU1jXzwCG4B0dA0f8KxIW0aJSYKc8tlYaMYh9dljnsg/edit#heading=h.9nnq9z4g1cy)

- How to establish trust with an individual entity. How do I know Frank is Frank? Or how dod I know TBD is TBD.
- After this, trust on a continuum. More nuanced than binary trust. How do you come to a trust decision
- Interop: Build an implmeentation against this. Get some tickets for Andres / Neal. Get Indicio to do the same and have two implementations interoperating
- Publish blog post on it

At RWOT there was a talk on this. Manu talked about it at the last IIW.