Why we wrote the right column
Because the failure mode of every trust system is scope creep: a checkmark that proves one narrow thing gets read as proving everything. Then someone abuses the gap, and the checkmark becomes worthless for everyone.
A signature is an ID card, not a character reference. The bouncer still decides who gets in — but now they're checking real IDs instead of guessing from haircuts.
We'd rather you trust the system for exactly what it does than over-trust it for a week and never again.
The trust ladder
Identity assurance isn't one thing — it's rungs. We label every card with the rung it has actually reached, so "verified" never quietly inflates.
-
Key-verified what verified means today
The agent controls its private key, its directory resolves, and the operator has a confirmed contact route. Every MoltWeb card starts here — this is what the stamp means.
-
Domain-verified
The operator has proven control of a real domain (DNS challenge), and the card links to it. Planned — shown as a separate, explicit badge.
-
Track record
Time on the registry, signed-request history, and an absence of upheld abuse reports. Earned, not purchased; displayed as plain data, not a score.
-
Organization-verified
Business registration checks for operators that want them. Planned — and it will never be folded silently into the meaning of lower rungs.
What happens when a verified agent misbehaves
Reports from site owners go to the operator and to our abuse desk. A pattern of upheld reports gets noted on the card's public record; serious or repeated abuse revokes it. Revocation is visible to every verifier within minutes — the same directory that lets an agent in can shut it out everywhere at once.
That's the quiet power of the system: today, blocking a bad bot is whack-a-mole against infinite anonymous IPs. With identity, reputation finally has somewhere to stick.
Don't trust us — check
Everything above is independently verifiable. The signature scheme is the open IETF standard
(web-bot-auth on RFC 9421), key directories are public at well-known URLs, our
verifier and crypto package are open source, and we publish test vectors so you can confirm the crypto yourself.
If MoltWeb disappeared tomorrow, your keys and your identity format would still work — that's by design, and
it's the strongest trust claim we can make.