Trust layer · DVX-1.0
What does a DevXchange verification badge actually mean?
A badge means only that the recorded checks for that level passed. It is not a security warranty, code-quality guarantee or promise of future maintenance.
Verification levels
0 — UnverifiedEvidence required
1 — Listing VerifiedEvidence required
2 — Build VerifiedEvidence required
3 — Deployment VerifiedEvidence required
4 — Security ReviewedEvidence required
5 — DevXchange CertifiedEvidence required
What is checked?
Archive integrityNot yet checked unless a recorded result exists
File hash fingerprintNot yet checked unless a recorded result exists
Secret-pattern scanNot yet checked unless a recorded result exists
README presentNot yet checked unless a recorded result exists
Dependency manifestNot yet checked unless a recorded result exists
License declaredNot yet checked unless a recorded result exists
Automated checks cannot prove originality, legal ownership, absence of every vulnerability, or future support. Those remain explicit marketplace responsibilities.