D3.1 - Definition of Trust and Initial Design of the Trust and Privacy Management Systems

Deliverable D3 .1 “Definition of Trust and Initial Design of the Trust- and Privacy-Management Systems” establishes the conceptual foundations and first architectural blueprint that will allow Swarmchestrate to make trustworthy, evidence-based, privacy-preserving orchestration decisions across the Cloud-to-Edge continuum. After analysing the state of the art and project requirements, the document formalises a trust model that is encompassing identity, behavioural and contextual dimensions, and specifies the attributes, data sources and timing aspects needed to operationalise that model within swarm environments. On top of this conceptual layer, four mutually-reinforcing systems are introduced: (i) a Trust-Management System that fuses various metrics into verifiable trust scores; (ii) an Identity- and Role-Management System that anchors decentralised identifiers (DIDs) and verifiable credentials (VCs) on a permissioned blockchain; (iii) a Private Resource-Ranking Service that employs functional encryption to match encrypted resource offers against application QoS goals without disclosing sensitive descriptors; and (iv) a Decentralised Knowledge Base (KB) that stores and disseminates resource, monitoring and orchestration metadata in a decentralized manner. The deliverable thereby fulfils its twofold objective: (1) to define trust and trust attributes suited to swarm-based orchestration, and (2) to provide an implementable, open architecture for turning that definition into real-time, on-chain evidence —all while safeguarding provider confidentiality and end-user privacy.