APIRMethodology · public document

Trust Genome™ Methodology

The 12-dimension scoring framework APIR uses to compute every agent's trust score. Published, versioned, citable. Every score on the platform references a specific version of this document.

The 12 Dimensions

01

Identity

Cap 95

Confirms the agent is who it claims to be: verified operator org, platform registration, signing keys controlled by the registered party.

02

Behavioral

Cap 100

Stability of agent behaviour relative to its baseline. Drift detection, prompt-response consistency, side-effect patterns.

03

Security

Cap 85

Attack-surface posture: risk-tier classification, secret handling, OWASP Agentic Security top-10 controls.

04

Oversight

Cap 85

Human-in-the-loop coverage. Ghost Audit enabled, review frequency, escalation paths, override controls.

05

Compliance

Cap 92

Conformity with frameworks the operator opted into: EU AI Act, NIST AI RMF, ISO 42001, GDPR, HIPAA, SOC 2.

06

Fairness

Cap 70fixed: not independently assessed yet

Bias and equitable-outcome posture. APIR does not yet run independent bias testing, so this dimension is FIXED at 70 for every scored agent until it does. No agent can buy this score up.

07

Transparency

Cap 100

Model card published, data lineage documented, decision-logging coverage.

08

Authorization

Cap 80

Scope minimisation and least-privilege adherence. Since 2.2.0, an active mandate signed by APIR (the actions the agent may take, its value cap and its dates) sets this to at least 70. Its limits are declared by the owner, so it stays below an assessed compliant status, and the cap holds until mandate enforcement is independently verified.

09

Accountability

Cap 90

Open-incident posture, escalation contacts current, audit-log coverage complete.

10

Data Integrity

Cap 70

Data classification declared, PII handling, lineage. Capped until integrity attestations are independently verified.

11

Performance

Cap 80

Operational reliability against committed thresholds.

12

Resilience

Cap 82

Monitoring active, failover behaviour, kill-switch wired.

Scoring

The Trust Genome is a documented derived composite, not 12 independent sensors. Each of the 12 dimensions is scored from the agent's own live evidence, up to that dimension's published cap. A dimension APIR cannot fully attest cannot pay out a perfect score: the caps are the honesty, not a limitation we hide.

Evidence gate: an agent is only scorable once it has produced at least 5 real behavioral events (actions, tasks, or decision-class Black Box records). Monitoring sweeps alone never make an agent scorable.

The overall Trust Score is the plain arithmetic mean of all 12 dimension scores: equal weighting, no hidden blend:

overall_trust_score = ( Σᵢ dimensionᵢ ) / 12

Because the caps sum to 1029, the maximum possible score is 85.75. That is deliberate: a perfect 100 would require attestations (independent bias testing, verified data-integrity chains, full mandate-level authorization proof) that the engine does not yet award. The ceiling rises only when the evidence model earns it, and every rise is a new version of this document.

Trust grade bands:

  • A≥ 85
  • B≥ 70
  • C≥ 55
  • D≥ 40
  • F≥ 0

Note what the ceiling means for grade A: with a maximum of 85.75, grade A (≥85) is only reachable in a 0.75-point window that requires simultaneous perfection on every capped dimension: zero drift, zero anomalies, zero open incidents, compliant status, low risk tier, active monitoring, Ghost Audit on, full metadata, an issued passport and complete transparency fields. No agent in production has earned it yet, and we publish that rather than moving the band.

An agent only receives a grade once enough evidence has been collected to score it. Where the underlying signals are insufficient, the genome is marked insufficient_data and the agent renders as Not rated (grade NR), never a 0 or an F. Absence of evidence is reported as absence of evidence, not as failure.

Reproducibility

Every trust_genomes row in APIR's database carries the methodology_version that produced it. When this methodology changes, the version bumps; historical scores stay tied to the version under which they were computed.

A third party with the 12 dimension scores can independently confirm any overall trust score we publish: sum them, divide by 12, and check the result against the published caps and grade bands. No hidden weights, no proprietary blend.

Version history

Version registry loading, every version is recorded in the public registry and renders here live.

Citing this document

APIR Intelligence. (2026). Trust Genome Methodology v….
https://apir.ai/methodology

AI Disclosure:APIR uses AI systems (Claude by Anthropic) for SENTINEL, assessment drafting, regulatory monitoring, and company enrichment. AI-generated outputs are labelled as such.

Limitations: AI outputs may not always be accurate, may generate incorrect or inaccurate content, and can hallucinate. They are provided for informational purposes only and are not a substitute for qualified human review. AI outputs should not be relied upon for legal, financial, or regulatory decisions without human verification. See our Model Card & system documentation, Responsible AI / AI Ethics Policy, and GDPR Article 22 disclosure for automated decisions, profiling, and right-to-human-review details.