Trust you can verify,
not just admire.
VaultStore trust is a certifiable score, not a private badge. Every signal ceiling, tier cutoff, and event type is published. Every profile links back to a replayable ledger.
01Four principlesPublished math, append-only history, no editorial boost, capped gameable inputs.
The formula is public. Same events in, same score out. A collector, seller, or regulator can replay it without asking us for hidden weights.
Scores are derived from immutable events: KYC, completed transactions, shipping scans, refunds, disputes, trades, and peer ratings.
There is no concierge path to a better badge. We do not hand-wave users into higher tiers or quietly suppress bad events.
Peer ratings can contribute up to twenty points, but only after enough counterparties rate you and the rest of the system still dampens spam-heavy behavior.
02Signal mapEvery input has a public ceiling; penalty signals are capped.
Binary verification through Stripe Connect identity completion.
Square-root dampened until one full year on VaultStore.
Log-dampened until roughly fifty completed transactions.
Log-dampened until roughly $25k lifetime gross volume.
Linear reward tied to first carrier scan timing.
Penalty based on dispute and refund share of completed transactions.
Penalty for post-lock trade edits after the counterparty believed the basket was frozen.
Counterparty-only ratings can contribute up to twenty points, but only after enough ratings exist to count and only alongside the rest of the ledger-based signals.
03Tier ladderWarn-only badges that explain risk without hiding counterparties.
Top Rated Seller. Vault-native operators with deep history, near-perfect shipping, and almost no negative trust signal.
Highly Rated Seller. Healthy transaction volume, stable shipping behavior, and enough verified history to transact confidently.
Trusted Seller. KYC complete and a real track record — still building toward Silver, but already well past the warning line.
No completed identity verification or not enough history yet. Visible warning tier, not a silent block.
04Audit pathPull the score, pull the ledger, replay the math.
Read /api/trust/<userId> to get the current score, tier, and signal contribution map.
Read /api/trust/<userId>/events to fetch the append-only event history that fed the score.
Run computeTrustScore(userId, events) with the public event list and compare the returned score to the API.
score = clamp(round(sum(signal.earned)), 0, 100)computeTrustScore(userId, events)05Live examplesOpen real seed profiles and inspect the ledger-fed breakdown.
How the score is built.
Published math
The formula is public. Same events in, same score out. A collector, seller, or regulator can replay it without asking us for hidden weights.
Append-only ledger
Scores are derived from immutable events: KYC, completed transactions, shipping scans, refunds, disputes, trades, and peer ratings.
No editorial overrides
There is no concierge path to a better badge. We do not hand-wave users into higher tiers or quietly suppress bad events.
Gameable inputs are capped
Peer ratings can contribute up to twenty points, but only after enough counterparties rate you and the rest of the system still dampens spam-heavy behavior.
The eight inputs that move the score.
Positive ceilings earn trust. Penalty ceilings are capped at the numbers below — they can subtract from the score but never below zero.
What each tier actually means.
Warn-only. The score informs risk; it does not quietly hide counterparties. Even an Unverified seller can list — the badge is right there for the buyer to see.
Gold
Top Rated Seller. Vault-native operators with deep history, near-perfect shipping, and almost no negative trust signal.
Usually means KYC is complete, shipping stays on-time at scale, transaction count and volume are mature, and penalties are near-zero.
Silver
Highly Rated Seller. Healthy transaction volume, stable shipping behavior, and enough verified history to transact confidently.
Usually means the seller has real volume, enough carrier scans to score shipping, and very few negative trust events dragging the total down.
Bronze
Trusted Seller. KYC complete and a real track record — still building toward Silver, but already well past the warning line.
Usually means KYC is done and the account has crossed the first meaningful history threshold, but volume or shipping maturity is still building.
Unverified
No completed identity verification or not enough history yet. Visible warning tier, not a silent block.
Usually means identity is still incomplete, history is thin, or the account has not yet produced enough events for the positive ceilings to matter.
Verify any score yourself.
Pull the score
Read /api/trust/<userId> to get the current score, tier, and signal contribution map.
Pull the ledger
Read /api/trust/<userId>/events to fetch the append-only event history that fed the score.
Replay the math
Run computeTrustScore(userId, events) with the public event list and compare the returned score to the API.
score = clamp(round(sum(signal.earned)), 0, 100)computeTrustScore(userId, events)See how real profiles resolve.
High-volume dealer, founder account, and low-history caution example. Tap any card to open the breakdown that fed the score.
Vault-native dealer. Thousands of shipped orders.
Building VaultStore. 0% fees forever.
Account created this week.