Sunstead trust scoring project
1# Tangled Trust Hat (browser overlay, PRD 7.4)
2
3A minimal MV3 content script that injects a calibrated **trust hat** next to
4contributor DIDs on tangled.org, reading the same `/score` API as the dashboard.
5UI only — the brain stays in the scoring service.
6
7## Load it
8
91. Run the scoring service: `python -m trust.api` (serves `http://127.0.0.1:8000`).
102. Chrome → `chrome://extensions` → enable Developer mode → **Load unpacked** → pick
11 this `extension/` folder.
123. Open a tangled.org PR or contributor page. DIDs get a colored pill
13 (green fast-lane / amber normal / red needs-review); hover for the reason.
14
15## Two things to confirm against the real site
16
17- **The DID selector.** `content.js` scans text nodes for `did:plc:` / `did:web:`
18 patterns — a best guess. If tangled.org renders DIDs in attributes or a different
19 shape, adjust the scan (this is the UI analog of confirming the NSIDs).
20- **CORS / host.** The API ships permissive CORS for local use; the manifest grants
21 `http://127.0.0.1:8000/*`. Point both at your host for a hosted demo.
22
23## Not built
24
25The upstream vision — Tangled's own appview rendering third-party trust records
26natively (the 6.11 `sh.tangled.trust.score` records) — is a platform change, not this
27extension. Ask Lewis whether the appview can render trust records authored by other DIDs.