← Trust Center

Threat-model template

For teams that sign their AI agent's steps into Proof of Agent Work receipts. Rows marked [FILL IN] are yours; the rest states how receipts behave today, as described in the Trust Center.

1. Scope

Agent and decision it supports	[FILL IN]
Where steps are recorded	[FILL IN: process, host, who can write to the log before signing]
Where receipts are signed	[FILL IN: our hosted signer / your own signer and key]
Who relies on a receipt	[FILL IN: customer, auditor, insurer, court]

2. Assets

Signing key (private) — whoever holds it can create valid receipts.
Step log before signing — whatever is in it when signed becomes the receipt.
Published public key and its fingerprint (did.json, PEM, Trust Center).
Receipts after signing, and the raw data their hashes point to.
[FILL IN: your own assets]

3. STRIDE

Threat	Example	Receipts today	Your control
Spoofing	Someone presents a receipt signed with a different key	Detected when the verifier's key fingerprint is compared with the published one	[FILL IN: who compares, over which channel]
Tampering	A step, amount or time is changed after signing	Detected: the signed hash tree no longer matches	[FILL IN]
Tampering (before signing)	The log is altered before it is signed, or the agent records something false	Not detected; a receipt covers what was recorded	[FILL IN: access control on the log, human review]
Repudiation	An operator later denies a step happened	The signed receipt and its RFC 3161 time stamp show the step was recorded at that time	[FILL IN]
Information disclosure	A receipt reveals personal or secret data to its recipients	Values can be stored as hashes; single steps can be hidden while the root still verifies	[FILL IN: which fields are hashed, salting]
Denial of service	The verifier cannot fetch the public key	Offline check with OpenSSL against a saved PEM works without destill.ai	[FILL IN: where you keep the PEM]
Elevation of privilege	The signing key is stolen	Not prevented: no hardware custody, rotation or revocation yet (roadmap)	[FILL IN: interim plan, contact for incidents]

4. Decisions

Accepted risks	[FILL IN]
Open actions, owner, date	[FILL IN]
Review date	[FILL IN]