OmaTrust (OMA3 Trust and Attestation).
Trust attestation and verification for the open ecosystem.
OmaTrust is a decentralized trust and reputation protocol developed by OMA3 that provides machine-verifiable attestations about internet-native services. It defines support attestations (Linked Identifier, Key Binding, Controller Witness) that establish identity relationships, and reputation attestations (User Review, Endorsement, Certification, Security Assessment) that carry trust signals. Each attestation follows a proof-based path, where the evaluator verifies cryptographic proofs, or a trusted-attester path, where the evaluator accepts attestations from allowlisted attesters under local policy. The semantic layer uses JSON Schema Draft 2020-12 and DID-based identifiers. The transport layer uses Ethereum Attestation Service (EAS) on OMAChain.
A manifest can carry OmaTrust attestation signals through claims, facets, and pointers. Claims declare the trust mode, proof type, and attestation status summaries. The omaTrustReputation facet carries a trust posture snapshot including attester list and threshold policy that evaluators compute locally. The omaTrustLifecycle facet records lifecycle state, event history, and freshness policy. Pointers reference on-chain attestation records, the trusted attester directory, and revocation logs. An evaluator can assess trust posture from the manifest alone, then follow pointers for direct cryptographic verification through OmaTrust infrastructure.
Attestation issuance, on-chain storage, cryptographic proof generation and verification, OmaTrust verification protocols, identity registry management, trust scoring and ranking, key lifecycle management, schema governance, and OMA3 governance decisions. UM carries OmaTrust attestations as projections inside the manifest envelope. OmaTrust defines what those attestations mean and how they are verified.