Trust companies need controls before scale
Security And Trust Governance
Governance thesis
Meridian cannot ask the world for trust without showing its own controls.
Scale is not just users. Scale is surviving abuse, public scrutiny, enterprise diligence, regulator pressure, customer disputes, and AI-driven attacks without compromising the record.
Audit-first data model
Claims, outcomes, score movement, evidence, resolver identity, and timestamps are preserved as records instead of overwritten silently.
Least-privilege operations
Admin and resolver workflows are separated from public product surfaces and must be logged when production credentials are active.
Evidence quality labels
Records carry source quality so public claims do not pretend weak evidence is institutional proof.
Domain isolation
Trust earned in one domain stays in that domain unless a resolver standard explicitly allows cross-domain interpretation.
Verified outbound only
Sales systems must use real public contacts, verified domains, and logged drafts before sending.
No paid score movement
Customers can pay for workflow, exports, API usage, and verification review, never hidden reputation changes.
Incident protocol
Detect
Flag suspected manipulation, resolver abuse, account compromise, scoring errors, data exposure, or unsafe automation.
Contain
Pause affected automations, lock disputed records, preserve logs, and stop additional writes where needed.
Investigate
Identify affected users, records, evidence, resolver actions, API keys, and public surfaces.
Correct
Write amendments instead of deleting history, notify affected parties, and publish the correction path when public trust is impacted.
Learn
Add a control, test, policy, rate limit, review path, or product change so the failure does not repeat.
Active threat watch
Synthetic accounts farming reputation.
Colluding private groups manufacturing credibility.
Resolved records being edited after the fact.
Weak sources being treated as strong evidence.
AI systems acting without authority logs.
Outbound automation damaging Meridian's credibility.
World Cup traffic making the company look like entertainment instead of proof infrastructure.
Customers asking Meridian to score a person instead of a record.
Scale rule
Meridian grows only where the record can remain explainable, inspectable, challengeable, and recoverable after failure. Anything else creates speed without trust.