# Ecosystem Governance Framework — primary document (stub)

**Status: draft for discussion. Not a governance act.** Structured per the ToIP
Governance Metamodel.

## 1. Identifier

- Framework identifier: `did:web:trustedlistoftrustedlists.org` (upgrade path `did:webvh`)
- `stewardship: proposed`

## 2. Glossary

- **Trust registry** — a machine-readable, resolvable register answering whether a
  party is recognised or authorised, and with what status.
- **Trusted list** — the same thing in ETSI/eIDAS vocabulary.
- **Authority** — a body whose statements a verifier may choose to rely on. Never
  "root of trust": there is no single root.
- **Recognition** — does this authority recognise that authority or registry, for
  this action and resource?
- **Authorization** — is this entity authorised to perform this action on this
  resource under this authority?
- **Forwarded** — the framework runs its own TRQP endpoint; queries are forwarded
  to it unchanged.
- **Mirrored** — the framework publishes a list but no TRQP endpoint; its public
  list is mirrored to answer, and it remains the source of truth.
- **Referenced** — pointer only, consumed as published.
- **Qualified Issuer** — an issuer accredited under a framework's own rules.

## 3. Governing authority and administering authority

The **proposed stewards** are the iSHARE Foundation, GLEIF, the Ayra Association
and DIDAS. Stewardship takes effect only when each organisation has acceded to
the meta-framework agreements. It has not.

The **administering authority** is the iSHARE Foundation, which operates this
register under its own responsibility. **Operating the meta-list confers no say
over it.**

## 4. Admission criteria

Sovereign and regulatory authorities are **referenced as published, never
admitted**: this framework has no authority over them and applies no admission
criteria to them.

Voluntary frameworks are recognised against published criteria. See
[the base requirements](/governance/requirements). In summary, a framework
demonstrates: published governance and accreditation criteria; identified legal
accountability of the governing authority — a legal entity identified under a
recognised scheme with declared assurance; conformance testing of its issuers;
supervision and revocation procedures; and machine-readable publication of its
own list.

**Sovereign first. Compete on assurance, not on a scheme.** No identifier
specification is mandated, and a party may carry several identifiers. The
requirement is governance, not a scheme.

## 5. Status vocabulary and procedures

`granted` · `undersupervision` · `suspended` · `withdrawn` · `supervision ceased`

Only `granted` and `undersupervision` may be relied upon. Withdrawn and ceased
entries remain published for at least as long as credentials issued under them
can be presented.

Procedures are defined for **suspension**, **removal** and **incident handling**,
so that trouble is visible before it is terminal.

## 6. Appeals

Admission and status decisions are appealable within 30 days to a body that did
not make them. Appeals and their outcomes are published as decision records.

## 7. Conflict of interest

A steward takes no part in decisions on its own framework's admission or status.
Its framework is assessed against the same published criteria by the remaining
stewards or an independent assessor. Recusals are recorded in the decision record.

## 8. Liability

Recognition is **not an endorsement** of any individual issuer and **transfers no
liability**. Each framework remains fully accountable for its own accreditations,
under its own legal regime.

## 9. Sustainability

Cost-recovery and non-profit, with published tariffs and statutes that rule out
profit distribution. Admission fees may cover assessment costs; they must never
function as a barrier the published criteria did not set.

## 10. Inclusion, equitability and accessibility

Open first: participation is open to any authority or framework meeting the
published criteria. Admission decisions are criteria-based and appealable, with
no incumbent veto and no exclusivity demanded of members. The accreditor role
itself is open — new frameworks and accreditation bodies can qualify at any time.

## 11. Legal agreements

*Placeholder: accession agreement — to be drafted on the iSHARE legal framework.*

## 12. Governance phases

- **Phase 0 — convene (current).** Memorandum of understanding, published
  criteria, draft decision records. No binding agreements.
- **Phase 1 — charter.** A meta-framework governance group with a charter.
- **Phase 2 — binding agreements.** Accession agreements and enforceable
  supervision.

## 13. Decision records

- `2026-09-01-eu-lotl-referenced.md` — **draft**
- `2026-09-01-gleif-vlei-granted.md` — **draft**
- `2026-09-01-ishare-granted.md` — **draft**
- `2026-09-02-bt-ndi-referenced.md` — **draft**
- `2026-09-02-ch-swiyu-referenced.md` — **draft**
- `2026-09-02-ishare-pointer-update.md` — **draft**