p2p-trust-stack
P2P Platform
Company
Details
License Dual licence — GPL-3.0-only (no 'or later' option) or a paid commercial licence; a contributor licence agreement is required
Dev Status 🔨 WIP
Dev Status Detail WIP (pre-1.0: version 0.2.0 tagged 31 October 2026; first tag 15 October 2026; no GitHub releases; the project says it has no third-party security audit)
Owner Trust Stackers (copyright is held by 'Trust Stackers', defined as the project and its maintainers; no incorporated legal entity is named)
Governing Body None stated (the maintainers review contributions; the contributor agreement leaves inclusion to Trust Stackers' discretion)
Country Not stated by the project (the licence terms are governed by California law)
Start Year 2026
Stack TypeScript on Node.js 22.5+ (built-in node:sqlite); libp2p with Noise and Yamux; noble cryptography libraries including post-quantum ML-KEM and ML-DSA; HPKE; Argon2id; CESR; npm workspaces. There is no browser build
Funding Not stated by the project.
Last Investigated Nov 12, 2026
P2P Platform Attributes
Origins Carved out of an internal monorepo on 2026-10-15 and published as two npm packages, @p2p-trust-stack/core and @p2p-trust-stack/app-api; it implements the Trust Spanning Protocol on libp2p
Database An encrypted SQLite keystore (AES-256-GCM with Argon2id) using Node's built-in node:sqlite
Query Language N/A: a TypeScript API with a 30-event catalogue; no query language
Data Formats Trust Spanning Protocol messages (types GEN, RFI, RFA, RFD and CONFIDENTIAL), DID documents, CESR encoding; the credential wire format is not stated
Collaborative Live Editing
Rich Text Editing
Mobile Support Partial: Node-only library; the organization publishes a demo mobile app built on it (agent-app-mobile, GPL-3.0)
Web Support No: 'there is no browser build'
Native Apps None of its own; a demo mobile app exists in the organization
Terms Free under GPL-3.0-only, or a paid commercial licence per an Order Form (fees not stated); the name and mark need a separate licence
Funds
Based On Trust Spanning Protocol v3, libp2p, did:peer:4 and did:scid:vh, Verifiable Relationship Credentials
P2P Architecture libp2p transport with relay circuits and a bootstrap client; the application constructs the libp2p node and hands it in; an ordered dial-candidate ladder keeps connections alive on NAT'd paths
Development Tools npm packages with subpath exports, READMEs per package, a changelog, an event catalogue, and a verify script (typecheck, tests, packed-tarball smoke test)
Deployment Options Embedded in a Node.js application; separate bootstrap/relay and utility servers (AGPL-3.0) are published in the organization
Authentication & Identity An agent identity unlocked with a passphrase; DIDs can be created, rotated, activated and deactivated; deny-by-default capability scoping for provisioned contexts
Storage Model Local encrypted SQLite keystore per agent; the host application owns the data directory
Interoperability Implements Trust Spanning Protocol v3 over libp2p; DID methods did:peer:4 and did:scid:vh; Verifiable Relationship Credentials . Reported to the DTG Interop Board as running TSP directly over libp2p with no mediator
Social Graph Relationships (out-of-band introductions), Verified Trust Communities and relationship credentials; governance proposals and approvals exist inside a community
Relationships
How this tool connects to other tools and organizations, from relationships reviewed by the OpenHaven data steward. They describe how projects connect, not how good they are.
- Built on
- libp2p
- Speaks protocol