---
name: Trusted
kind: type
since: 0.1
stability: stable
---

Refinement type carrying compliance evidence.

`Trusted<T>` is a value of type `T` that has been validated against
a closed catalogue of trust verifiers (e.g., source-bound,
threshold-attested, replay-verified). The type checker refuses to
implicitly downgrade a `Trusted<T>` to a plain `T`, and refuses to
implicitly promote a plain `T` — the only path is through a
verifier declared in the program's `trust_verifiers` catalogue.

Used at the boundary of any flow that consumes user-supplied or
network-supplied values whose authenticity matters.
