Trust & Federation

Communities should connect without surrendering themselves.

RelayHub treats trust as a human and community responsibility supported by technology. Federation should help communities cooperate, share, trade, learn, and coordinate without forcing central control, hidden dependency, or automatic trust.

Why trust matters

Resilient communities need more than connection.

Being connected is not the same as being trusted. A community must know who it is dealing with, what relationship exists, what permissions apply, what can be shared, what can be revoked, and what happens when something goes wrong.

Trust begins with people

RelayHub supports human trust; it does not replace relationship, judgement, responsibility, or accountability.

Communities remain sovereign

Each community keeps authority over its own members, rules, culture, governance, moderation, and participation.

Federation is voluntary

Communities may connect with others by consent, and they must be able to limit, pause, revoke, or leave federation.

Technology makes trust visible

Identity, pairing, roles, reputation, permissions, and policy help communities see and manage trust relationships.

Trust must be revocable

A trusted relationship must be able to become limited, quarantined, revoked, repaired, or restored.

Trust is not automatic

Reachability, discovery, federation, marketplace participation, or LAN access must never automatically mean trust.

Human trust first

Technology can support trust, but it cannot manufacture it.

RelayHub can help make trust visible through identity, pairing, roles, permissions, reputation, policy, and records. But trust still emerges from relationship, demonstrated behaviour, accountability, shared expectations, and community judgement.

Relationship

Trust grows through repeated interaction, reliability, reputation, accountability, repair, and shared work.

Visibility

Participants should be able to see whether something is unknown, paired, trusted, limited, quarantined, or revoked.

Responsibility

Communities must remain responsible for membership, moderation, federation, dispute handling, and local governance.

Trust states

Trust should be visible, limited, and revocable.

RelayHub should help people understand the status of a relationship. A participant, node, service, community, or federation may move through different states over time.

Unknown

The person, node, group, or community has not yet been recognised.

Discovered

The entity is visible or reachable, but no trust relationship has been established.

Paired

A basic relationship has been created through an explicit pairing, invite, or introduction process.

Trusted

The relationship is permitted for defined actions under policy, role, and community rules.

Limited

The relationship is allowed only in a restricted way, often because of role, risk, policy, or uncertainty.

Quarantined

The relationship is contained while a concern, conflict, failure, or investigation is handled.

Revoked

Trust has been removed. Access, visibility, or participation should cease where policy requires.

Restored

Trust may be rebuilt through explicit repair, review, recovery, or community process.

What trust applies to

Trust exists at more than one layer.

RelayHub trust is not only about devices. It applies to people, communities, services, operators, federations, and the relationships between them.

People

Members, guests, stewards, operators, vendors, builders, moderators, and recovery contacts.

Devices

Phones, browsers, Home Nodes, Infrastructure Nodes, Radio Nodes, and paired client devices.

Communities

Households, groups, towns, regions, clubs, associations, events, and local organising networks.

Services

Boards, markets, libraries, directories, events, governance tools, support exports, and future applications.

Operators

People or teams responsible for infrastructure, gateways, updates, recovery, validation, and support.

Federations

Voluntary structures connecting multiple communities under explicit agreements and limited shared trust.

What trust is not

Connection is not permission.

RelayHub should avoid false confidence. Seeing another node, joining a community, participating in a marketplace, or sharing a federation does not automatically grant trust across all people, services, or records.

Discovery is not trust

A discovered person, node, service, or community is visible, but not automatically trusted.

Reachability is not authority

If something can be reached over a network, that does not mean it may administer, moderate, publish, trade, or federate.

Federation is not surrender

A community may federate with others while retaining local rules, local identity, local moderation, and local governance.

Federation explained

Federation means voluntary cooperation between communities.

A federation is not a central authority. It is a relationship between communities that choose to share defined services, information, trust, coordination, or visibility under explicit agreement.

Community A

Keeps its members, identity, governance, moderation, culture, knowledge, marketplace rules, and recovery paths.

Community B

Keeps its own authority as well. Cooperation happens through a defined federation relationship, not forced central control.

Federation agreement

The agreement defines what is shared, what is not shared, who can see it, who can moderate it, how disputes are handled, how records are retained, and how trust can be limited or revoked.

Federation scopes

Communities can federate narrowly or broadly.

Federation should be modular. A community may share one capability with another community without sharing everything.

Directory sharing

Communities may choose to make basic community or service discovery visible to trusted neighbours.

Knowledge sharing

Selected guides, maps, training material, public procedures, or library collections may be shared.

Marketplace sharing

Selected offers, requests, services, skills, or resources may be visible across trusted communities.

Event sharing

Meetings, workshops, working bees, local events, training sessions, or public notices may be shared.

Emergency coordination

Urgent notices, resource needs, shelter information, transport coordination, or local status may be shared.

Full cooperation

Broader federation may exist, but only under explicit agreement, defined limits, and revocable trust.

Federation lifecycle

Federation should be able to begin, change, pause, and end safely.

A community should never be trapped inside a federation relationship. Joining, operating, limiting, reviewing, revoking, and leaving should be explicit and recoverable.

Discover

A community becomes aware of another community, operator, service, or federation.

Introduce

A relationship begins through a known participant, invitation, direct contact, or public listing.

Evaluate

Communities assess purpose, rules, compatibility, risks, benefits, and governance expectations.

Agree

A federation relationship is defined by scope, roles, visibility, moderation, retention, and responsibilities.

Operate

The federation runs under policy, trust, observability, recovery, and community governance.

Review

Communities periodically review whether federation is still useful, safe, fair, and aligned.

Limit

Federation can be narrowed to fewer services, smaller visibility, reduced trust, or temporary read-only operation.

Revoke

A community can leave, pause, revoke, quarantine, or dissolve federation without destroying local operation.

Federation agreements

Cooperation needs clear expectations.

A federation agreement should be understandable before it is accepted. It should describe what the relationship allows, what it excludes, how it can be reviewed, and how it can be revoked.

Agreement checklist

Who is participating?
What is being shared?
Which services are included?
Which services are excluded?
Who may see shared information?
Who may moderate shared spaces?
How are disputes handled?
How long are records retained?
How is trust revoked?
How is recovery handled?
What happens during degraded operation?
How does a community leave?

Joining and leaving

A community must remain whole even if federation changes.

Federation should strengthen local communities, not replace them. If a federation relationship pauses, degrades, breaks, or ends, the local community should retain its identity, knowledge, governance, recovery, and internal communication wherever supported.

Join

A community may join a federation after understanding scope, visibility, shared services, obligations, moderation, risks, and exit paths.

Limit

Federation may be narrowed to selected services, read-only access, reduced visibility, temporary pause, or emergency-only cooperation.

Leave

A community may leave a federation without losing local records, local identity, local knowledge, local roles, or recovery access where supported.

Trust degradation and recovery

Trust can fail softly.

A disagreement, failed service, suspicious behaviour, broken sync, compromised device, or federation dispute should not automatically destroy everything. Trust can be limited, quarantined, revoked, repaired, or restored through explicit process.

Limited

Reduce access, visibility, service scope, marketplace participation, or federation sharing while preserving safe local operation.

Quarantined

Contain a relationship while operators or community stewards review the issue and protect identity, recovery, and safety.

Revoked

Remove trust where necessary. Revocation should be visible, enforced, logged where appropriate, and recoverable from mistakes.

Examples

Trust and federation in practice.

Trust and federation should solve real community problems rather than exist as abstract technical concepts. These examples illustrate how communities may cooperate while retaining autonomy.

Neighbouring towns

Two towns may share emergency notices, selected marketplace listings, and public events while keeping their own governance separate.

Rural properties

Nearby households may share practical notices, tool requests, transport needs, and local knowledge without exposing private records.

Event networks

A festival, market, or field event may create temporary federation between organisers, vendors, volunteers, and local support teams.

Skill communities

A maker group, radio group, preparedness circle, or repair collective may share guides, workshops, and trusted contacts.

Hard boundaries

What trust and federation do not mean.

Clear boundaries help prevent false assumptions, excessive trust, accidental centralisation, and avoidable community conflict.

Federation does not mean every member trusts every other member.

Discovery does not mean permission.

Reachability does not mean trust.

Marketplace participation does not mean endorsement.

A shared directory does not mean shared governance.

A trusted node does not automatically make every service trusted.

A community may federate narrowly without joining everything.

A community must be able to leave without losing local identity.

Trust should be visible, limited, reviewable, and revocable.

Technology support

Infrastructure should make trust understandable.

RelayHub infrastructure should help communities see relationships, understand permissions, identify risks, review federation agreements, recover from mistakes, and operate safely under normal and degraded conditions.

Identity

Visible identities, paired relationships, recovery contacts, revocation paths, and understandable ownership.

Policy

Community-defined rules governing visibility, federation, participation, moderation, retention, and recovery.

Recovery

Clear restoration paths for communities, services, relationships, permissions, records, and infrastructure.

Roadmap

Build trust carefully.

Trust and federation should expand only as validation, usability, recovery, governance, and observability mature. Communities should be able to understand every trust relationship they create.

Trust language

Define the plain-language trust model for users, communities, services, and operators.

Pairing and roles

Validate explicit pairing, invitation, role limits, revocation, recovery, and visibility.

Community trust

Support membership, stewards, operators, moderation, reputation, and local governance boundaries.

Federation agreements

Define explicit federation scope, shared services, retention, moderation, recovery, and exit rules.

Federated services

Enable selective sharing for directory, marketplace, library, events, emergency notices, and governance where validated.

Trust grows through use

Communities earn trust through participation.

Trust cannot be downloaded, purchased, or automatically assigned. Communities build trust through communication, cooperation, knowledge sharing, accountability, dispute resolution, and long-term participation.

Early interest

Help shape the federation model.

RelayHub trust and federation should be shaped by real communities, operators, organisers, rural groups, clubs, associations, event teams, educators, and local leaders solving practical problems.

Interested in trust and federation?

Register interest if you want to help test community trust models, federation agreements, governance approaches, recovery processes, or local-first cooperation as RelayHub develops.