# TrustScript Product Wedge Brief v1.0

**Status:** Public wedge narrative  
**Audience:** Buyers, security leaders, platform architects

---

## Why TrustScript exists

Enterprise AI risk concentrates where **belief becomes action**:

1. Agents **act** externally without a valid action basis (Surface 1).
2. Untrusted content becomes **durable memory or retrieval basis** (Surface 2).

TraceScript Core already evaluates every signal and emits receipts. TrustScript adds product-native gates so those receipts encode **which trusted-state surface** authorized or blocked the transition.

---

## The wedge

**Agent Action Firewall + Trusted Memory Integrity**

| Surface | Buyer lens | What breaks without it |
|---------|------------|------------------------|
| 1 — Action Firewall | Safe-to-act | Refunds, emails, CRM updates, deploys without release artifacts |
| 2 — Memory Integrity | Safe-to-trust | Poisoned RAG, synthetic summaries promoted to canonical memory |

Both surfaces are **live in RC1** with dedicated `/trustscript/surfaces/*/evaluate` routes, receipt surface tags, conformance fixtures, and observability views.

---

## What you get in production

- Synchronous evaluate in the API path — block inside the transaction
- Immutable receipts with `trustScriptSurface` and operator bindings
- Deterministic replay for continuity verification (Surface 5)
- Audit bundle export for assurance teams (Surface 6)
- Unified proof flow: `POST /trustscript/proof/run`

---

## Expansion path (surfaces 3–6)

After the wedge, expand across:

- **Surface 3** — Policy Corpus Integrity
- **Surface 4** — Workflow Truth & Commitment Ledger
- **Surfaces 5–6** — Continuity verify + evidence export (proof console)

TrustScript-governed branches (Disclosure Firewall, Code Medium, Constitutional Agents) run on the same runtime with product-depth scoring.

---

## Evaluation checklist

1. Ingest a high-risk execution signal → evaluate with `product_deep` → confirm block + receipt.
2. Attempt canonical memory write from low-trust agent output → confirm promotion block.
3. Run proof flow on evaluate receipt → confirm continuity matched + bundle exported.
4. Review surface decision ledger in Portal observability.

---

## Links

- [TrustScript hub](/trustscript.html)
- [System Architecture v1.0](/downloads/trustscript-system-architecture-v1.0.md)
- [Agent Action Firewall whitepaper](/action-firewall.html)
- [Substrate Integrity Monitor whitepaper](/substrate-integrity-monitor.html)
- [Developer quickstart](/developers.html)
- [Portal](/portal.html)