PLAN — T1b Trust Card MVP (2026q2)¶

Status: Implemented on main (March 2026) Date: 2026-03-23 Scope: deterministic render layer over T1a; ADR-033; RFC-005

1) Goal¶

Ship trustcard.json (canonical) and trustcard.md (secondary) derived only from generate_trust_basis → trust_basis_to_trust_card. No second classification pass, no aggregate score, no badge semantics, no trust_basis_sha256 in v1.

2) Frozen contract (T1b baseline; extended by G3, P33, P45, and P45b)¶

This table records the current effective T1b surface as extended by later accepted slices; it is not a claim that all of these properties shipped in the original March 2026 cut.

Item	Rule
`schema_version`	`5` after P45b (`TRUST_CARD_SCHEMA_VERSION`); was `4` after P45, `3` after P33, `2` after G3, and `1` for the original T1b-only ship.
`claims[]`	`Vec<TrustBasisClaim>` — same serde as trust basis; ten frozen ids after P45b, same order as `TrustBasis::claims` (was nine after P45, eight after P33, seven after G3, and six for T1a-only).
`non_goals`	Three fixed strings in fixed order (`TRUST_CARD_NON_GOALS` in code); identical in JSON and Markdown.
Markdown `note` column	Empty T1a `note` renders as placeholder `-` (`TRUST_CARD_NOTE_EMPTY_PLACEHOLDER`); no multiline cells.
Markdown shape	Title + fixed five-column table + `## Non-goals` with literal bullets.

3) Library API¶

Implementation: crates/assay-evidence/src/trust_card.rs

trust_basis_to_trust_card(&TrustBasis) -> TrustCard
trust_card_to_canonical_json_bytes(&TrustCard) -> Result<Vec<u8>> (pretty JSON + trailing newline, same pattern as trust basis)
trust_card_to_markdown(&TrustCard) -> String

4) CLI¶

assay trustcard generate <BUNDLE> --out-dir <DIR> [--pack …] [--max-results N]

Writes <DIR>/trustcard.json and <DIR>/trustcard.md. No stdout artifact stream in v1; stderr may log paths.

5) Review gates¶

trust_basis.rs: T1b changes only for shared type/export/serde glue if ever needed — not classify_* or claim ordering/content.
Tests: cargo test -p assay-evidence, cargo test -p assay-cli --test trustcard_test, workspace clippy with -D warnings.

6) Explicit non-scope (this wave)¶

--from-trust-basis / non-bundle input
Trust card bytes on stdout
Signing/attestation of card files
trust_basis_sha256 (or similar) in trustcard.json v1