- T41: POST /api/jobs with valid Nostr token → nostrPubkey in response
- T42: POST /api/sessions with valid Nostr token → nostrPubkey in response
- T43: GET /identity/me returns tier, score, interactionCount fields
- T44: POST /identity/me/decay (test-only, 404 in prod) → score decremented
- T45: GET /identity/leaderboard → HTTP 200, array sorted by trustScore desc
New endpoints in identity.ts:
- POST /api/identity/me/decay — test-only (disabled in production via NODE_ENV check)
triggers one decay cycle via new TrustService.decayOnce() method
- GET /api/identity/leaderboard — public, returns top 20 identities by trust score
New TrustService.decayOnce() in trust.ts applies one DECAY_PER_DAY deduction
immediately without the 30-day absence threshold, enabling deterministic test coverage.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
