{"schema":"mycolo.trust.v0","self":"https://mycolo.ai/api/trust","definitions":{"claimed":{"means":"Typed or client-reported tok/s without a verified local receipt.","proves":"Someone asserted a number.","does_not_prove":["That a generate happened on the claimed hardware","Independent lab measurement","Ranking eligibility"]},"signed":{"means":"Ed25519 receipt on the submitter's box: this local key observed this file.","proves":"A private key under the submitter's control signed the content hash.","does_not_prove":["Independent attestation of inference","That MyColo, NVIDIA, or a lab checked tok/s","Hardware identity beyond what the client reported","That a client-controlled bench was free of tampering"]},"measured":{"means":"Server-assigned when locked local bench flags are present (num_predict=256, temperature=0, not host=remote) plus a valid receipt.","proves":"The posted bundle matches the locked protocol shape and carries a valid signature.","does_not_prove":["Independent remote attestation","That the Ollama/engine binary was unmodified","TEE/TPM/HW root of trust (out of scope)","That client-controlled timing could not be spoofed"]}},"ranking":{"cohort":"signed + measured preferred; measured sorts first within a hardware class + workload","eligible":"protocol_valid (signed|measured + known active workload); claimed does not rank","personal_best":"Board shows personal-best per handle in class; duplicates do not multiply rank spam","headline":"Median over signed/measured cohort when labeled; thin cohorts suppress percentile theater","boards":{"official":{"workload_id":"wl-v1-qwen38-27b-ollama","label":"27B","note":"Official / wl-v1 race only. Signup not required to run a valid official measure when prereqs are met."},"smoke":{"workload_id":"wl-smoke-qwen25-7b-ollama","label":"7B","promotes_to_official":false,"note":"7B board ranks 7B runs only. Claiming a 7B row under a handle does not promote to 27B."}},"no_mix":"Never merge smoke into official percentiles or claim × faster than the other board."},"privacy":{"allowlist":["handle","tok/s","trust splits","workload_id","profile_id","coarsened OS/CPU","GPU class","runtime recipe key","deltas/outcomes","verification booleans"],"never_publish":["hostname","home paths","LAN/WAN IP","MAC","serial","machine-id","notes","system RAM","fingerprint hex","public_key_hex / signature_hex on list/board/preview","Bearer tokens","Ed25519 seed / private key"],"doc":"PRIVACY.md (repo) + HTML /signoff + GET /api/signoff"},"credentials":{"bearer":"Opaque signup token (SHA-256 at rest). Authorizes free-tier write. Not a signing key. No scopes split in MVP.","ed25519":"Local keygen only (~/.config/mycolo/ed25519.seed). Never uploaded. Signs receipts; site does not hold private key.","flow":"register → store Bearer in ~/.config/mycolo/agent.token → mycolo-measure keygen (separate) → measure → show payload → human accept → publish","rotate":"https://mycolo.ai/api/token/rotate","revoke":"https://mycolo.ai/api/token/revoke"},"cli_trust":"docs/CLI_TRUST.md — pin install by path/tag + sha256; permissions manifest; no curl|sh","links":{"signoff_html":"https://mycolo.ai/signoff","signoff_api":"https://mycolo.ai/api/signoff","privacy":"PRIVACY.md","agent":"docs/AGENT.md","credentials":"docs/CREDENTIALS.md","cli_trust":"docs/CLI_TRUST.md","catalog":"https://mycolo.ai/api"},"out_of_scope":["Hardware attestation / TEE / TPM","OAuth2 / OIDC","CAPTCHA / interactive challenge on /api/*","Token scopes split (Later)","cosign signed releases (Later; tag + sha256 honesty for now)"]}