Type Alias: MediaTrustTier

type MediaTrustTier = readonly [
  "first-party",
  "third-party-public",
  "third-party-private",
];

Provenance axis. Who is the framework willing to vouch for as the source of these bytes?

Remarks

Mirrors RetrievableTrustTier deliberately — same vocabulary, same question: did this content come from a place the agent should treat as authoritative?

• 'first-party' — deployer-vetted bytes (tool output the operator authored, signed internal assets).
• 'third-party-public' — open-web fetches, public APIs, public corpora.
• 'third-party-private' — user uploads, partner APIs, private corpora.