EUDI Wallet Runtime Trust Checklist for Wallet Builders

This document is a guide that outlines the EUDI Wallet runtime trust checklist specifically designed for wallet builders and operators. It provides a structured approach to establishing trust during the activation of mobile wallet instances, monitoring operational security posture, and responding to changing conditions. The checklist includes steps for defining ownership and scope, verifying genuine wallet instances, establishing wallet instance integrity, monitoring security signals, setting privacy boundaries, defining proportionate responses, maintaining protection after release, and producing usable evidence. Each section encourages users to assess their compliance by marking items as Covered, Partial, or Gap, while also documenting ownership, evidence, and next actions. The guide emphasizes the importance of establishing a formal security baseline and ensuring that all operational aspects are addressed to maintain trustworthiness in wallet operations.