Overview
The ZKScore Trust Layer V1 is a comprehensive decentralized attestation and verification system that enables developers to build trust-enabled applications. It combines on-chain attestations, flexible policy evaluation, and cryptographic verification to create a new paradigm for trust in Web3.Attestations
Cryptographically signed claims about identities, behaviors, and achievements
Policies
Flexible rules for evaluating trust and determining access
Attesters
Trusted entities that issue attestations and build reputation
Trust Modules
Pluggable logic for custom trust evaluation
Architecture
The Trust Layer consists of four main components working together:Attestations
Attestations are cryptographically signed statements that provide verifiable claims about identities, behaviors, skills, or achievements. They form the foundation of the Trust Layer.What are Attestations?
An attestation is a structured data record that contains:- Attester: The entity issuing the attestation
- Subject: The entity receiving the attestation
- Schema: The data structure defining the attestation
- Data: The actual claim data
- Expiration: Optional time limit
- Revocation: Can be revoked by the attester
Example Attestation
Types of Attestations
1. Identity Attestations
Verify personal or organizational identity:- KYC/AML compliance
- Professional credentials
- Organization membership
- Geographic location
2. Behavioral Attestations
Track on-chain behavior:- DeFi protocol usage
- Trading patterns
- Governance participation
- NFT collection activity
3. Skill Attestations
Certify abilities and knowledge:- Technical certifications
- Code contributions
- Project leadership
- Community contributions
4. Achievement Attestations
Recognize accomplishments:- Protocol milestones
- Community achievements
- Competition wins
- Special recognitions
Creating Attestations
Via API
Via Smart Contract
Policies
Policies are flexible rules that define how attestations should be evaluated to determine trust levels, access rights, or other decisions in your application.What are Policies?
A policy is a set of conditions that can be evaluated against a user’s attestations to make decisions. Policies are composable, versioned, and can be customized for different use cases.Policy Structure
Policy Types
1. Access Control Policies
Control who can access features or resources:- DeFi protocol access
- Premium feature gates
- Community membership
- Voting rights
2. Risk Assessment Policies
Evaluate risk levels for lending or trading:- Credit scoring
- Collateral requirements
- Trading limits
- Insurance eligibility
3. Reputation Policies
Calculate reputation scores:- Trust score components
- Achievement weighting
- Decay mechanisms
- Threshold calculations
4. Compliance Policies
Ensure regulatory compliance:- KYC requirements
- Geographic restrictions
- Age verification
- Professional licensing
Creating and Evaluating Policies
Create a Policy
Evaluate a Policy
Attesters
Attesters are trusted entities that issue attestations in the ZKScore Trust Layer. They play a crucial role in building trust and reputation in the ecosystem.Becoming an Attester
The Trust Layer V1 uses a whitelist model where attesters must be approved by the ZKScore team or governance. This ensures quality and prevents spam.Attester Requirements
- Organization Identity: Clear organizational identity and purpose
- Technical Capability: Ability to integrate with ZKScore APIs
- Trustworthiness: Established reputation or credentials
- Use Case: Valid business case for issuing attestations
- Staking: Optional SCORE token staking for high-value attestations
Application Process
- Submit Application: Complete attester application form
- Technical Review: API integration and technical capability review
- Business Review: Use case and business model evaluation
- Approval: Team approval and API key generation
- Onboarding: Technical integration and testing
Attester Tiers
| Tier | Requirements | Capabilities | Staking |
|---|---|---|---|
| Team | Internal ZKScore team | Full access, all features | None |
| Partner | Strategic partners | High limits, priority support | 10,000 SCORE |
| Verified | Established organizations | Standard limits | 1,000 SCORE |
| Community | Community attesters | Basic limits | 100 SCORE |
Attester Responsibilities
1. Data Quality
- Ensure attestation data is accurate and verifiable
- Implement data validation and quality checks
- Maintain data freshness and relevance
2. Security
- Secure API key management
- Implement proper authentication
- Monitor for suspicious activity
3. Compliance
- Follow relevant regulations and guidelines
- Implement privacy controls
- Maintain audit trails
4. User Experience
- Provide clear attestation schemas
- Offer user-friendly interfaces
- Respond to user inquiries
Attester Tools
API Integration
Dashboard Access
- Real-time attestation statistics
- User feedback and ratings
- Revenue and token rewards
- Performance metrics
Trust Modules
Trust Modules are pluggable components that define how attestations should be processed and evaluated. They enable custom trust logic for different use cases.Built-in Modules
1. DeFi Module
Evaluates DeFi protocol usage and experience:- Protocol diversity scoring
- Volume and activity metrics
- Risk assessment
- Yield farming participation
2. NFT Module
Assesses NFT trading and collection activity:- Collection diversity
- Trading volume and frequency
- Creator support
- Community participation
3. Governance Module
Measures governance participation:- Voting frequency
- Proposal creation
- Delegation activity
- Community engagement
4. Social Module
Evaluates social and community contributions:- Content creation
- Community moderation
- Event participation
- Referral activity
Custom Modules
You can create custom trust modules for specific use cases:Integration Patterns
1. Trust-Gated Applications
Build applications that require trust verification:2. Reputation-Based Lending
Implement lending based on trust scores:3. DAO Governance
Implement reputation-weighted voting:Security Considerations
1. Attestation Integrity
- All attestations are cryptographically signed
- Immutable on-chain storage
- Revocation mechanisms for invalid attestations
2. Privacy Protection
- Zero-knowledge proofs for selective disclosure
- Optional anonymity for sensitive attestations
- Data minimization principles
3. Sybil Resistance
- Attester whitelisting prevents spam
- Staking requirements for high-value attestations
- Reputation decay mechanisms
4. Governance
- Decentralized policy updates
- Community-driven attester approval
- Transparent decision-making processes