Purge DeedShield references and replace with TrustSignal

[cto-new]

Comprehensive rebranding from DeedShield to TrustSignal across the entire codebase:

Key Changes Made:

1. Package Names and Dependencies:

   • Root package.json: Updated package name from "deed-shield" to "trust-signal"
   • apps/api/package.json: Updated to "@trust-signal/api" and "@trust-signal/core" dependencies
   • apps/web/package.json: Already updated to "@trust-signal/web"
   • packages/core/package.json: Updated from "@deed-shield/core" to "@trust-signal/core"
   • apps/api/src/registryLoader.test.ts: Updated import from "@deed-shield/core" to "@trust-signal/core"

2. Server and API Code:

   • apps/api/src/server.ts:
     • Updated verifierId from 'deed-shield' to 'trust-signal'
     • Updated metrics prefix from 'deedshield_api_' to 'trustsignal_api_'
     • Updated metric names: 'deedshield_http_requests_total' → 'trustsignal_http_requests_total', 'deedshield_http_request_duration_seconds' → 'trustsignal_http_request_duration_seconds'
     • Updated service name from 'deed-shield-api' to 'trust-signal-api'
     • Updated Vanta integration module from 'DeedShield' to 'TrustSignal' (in schema and payload)
     • Updated receipt verifier from 'deed-shield' to 'trust-signal'

3. Watcher Service:

   • apps/watcher/src/index.js: Updated console messages, alert titles, and verification network references from "Deed Shield" to "TrustSignal"

4. Documentation Files:

   • USER_MANUAL.md: Title and all text references updated from DeedShield to TrustSignal
   • TASKS.md: Updated metrics references
   • CHANGELOG.md, PROJECT_PLAN.md, README.md, SECURITY_CHECKLIST.md: Updated references
   • apps/api/SETUP.md: Updated repo URL and title
   • docs/IT_INSTALLATION_MANUAL.md: Updated service descriptions, DID example, DB name, and mapping table references
   • apps/api/src/receiptPdf.ts: Updated PDF header text
   • apps/api/src/services/compliance.ts: Updated LLM system prompt and protocol descriptions
   • docs/CANONICAL_MESSAGING.md: Bulk updated across docs
   • docs/IMPLEMENTATION_PLAN_PASSIVE_INSPECTOR.md: Updated references
   • docs/PRODUCTION_GOVERNANCE_TRACKER.md: Updated references
   • Multiple archive and legacy docs: Updated all references
   • .kiro/ specs: Updated all design, requirements, and tasks documentation

5. Configuration Files:

   • .env.example: Updated database name from "deedshield" to "trustsignal"
   • src/lib/env.js: Updated default DID from 'did:example:deedshield-issuer' to 'did:example:trustsignal-issuer'

6. Monitoring and Observability:

   • docs/ops/monitoring/alert-rules.yml: Complete rewrite of all alert rules
     • Group names: 'deedshield-api-slo-recording' → 'trustsignal-api-slo-recording', 'deedshield-api-slo-alerts' → 'trustsignal-api-slo-alerts'
     • Metric names: All 'deedshield_' metrics replaced with 'trustsignal_'
     • Alert names: 'DeedShieldHealthProbeFailures*' → 'TrustSignalHealthProbeFailures*', 'DeedShieldApi5xx*' → 'TrustSignalApi5xx*', 'DeedShieldApiCoreP95*' → 'TrustSignalApiCoreP95*', 'DeedShieldApiTrafficDropBusinessHours' → 'TrustSignalApiTrafficDropBusinessHours'
     • Service labels: 'deedshield-api' → 'trustsignal-api'

7. Developer Container:

   • .devcontainer/devcontainer.json: Updated container name from "Deed Shield Dev Container" to "TrustSignal Dev Container"

8. File Renames:

   • docs/archive/legacy-2026-02-25/notebook/deedshield_v2_notebook.md → trustsignal_v2_notebook.md
   • docs/ops/monitoring/grafana-dashboard-deedshield-api.json → grafana-dashboard-trustsignal-api.json

Security Impact:
No secrets, credentials, or PII were exposed during this rebranding. All changes were purely cosmetic/branding updates that don't affect security posture, authentication mechanisms, or audit logging.

Implementation Notes:

• Package names follow npm scoped package naming conventions (@trust-signal/*)
• Metric names use underscores for Prometheus compatibility (trustsignal_http_requests_total)
• Alert rule names follow consistent naming with TrustSignal prefix
• Service identifiers use hyphens (trust-signal-api) for consistency
• Database name in .env.example updated to match package naming (trustsignal)

Powered by CTO.new