---
url: 'https://adk.nht.io/api/@nhtio/adk/common/type-aliases/RetrievableTrustTier.md'
description: >-
  Trust-tier discriminator declared by the retrieval middleware at construction
  time. Drives which envelope the LLM battery wraps the record in.
---

# Type Alias: RetrievableTrustTier

```ts
type RetrievableTrustTier =
  | "first-party"
  | "third-party-public"
  | "third-party-private";
```

Defined in: [lib/classes/retrievable.ts:28](https://github.com/NHTIO/ADK/blob/v1.20260605.0/src/lib/classes/retrievable.ts#L28)

Trust-tier discriminator declared by the retrieval middleware at construction time. Drives
which envelope the LLM battery wraps the record in.

## Remarks

Vocabulary deliberately mirrors the published security-research taxonomy ("first-party /
third-party" per *Hidden-in-Plain-Text* WWW '26 and *When AI Meets the Web* IEEE S\&P 2026)
and explicitly avoids the words "user" or "system" so the names cannot leak into the model's
OpenAI-Model-Spec role-tier authority resolution.

* `'first-party'` — deployer-vetted corpora (signed internal docs, policy KBs, curated
  reference material). Rendered as a `<retrieved_corpus>` parent with per-record nonce-keyed
  `<retrieved>` children. The label "first-party" never appears in the envelope itself.
* `'third-party-public'` — open-web scrapes, search results, public APIs. Rendered through
  the untrusted-content envelope with `kind: 'retrieved-third-party-public'`.
* `'third-party-private'` — user uploads, pasted attachments, partner APIs. Rendered through
  the untrusted-content envelope with `kind: 'retrieved-third-party-private'`.