Status: Phase 1 stub. Matures in Phase 5 per §8.1. Audit references: patterns #10, #15, #17.

Statement

A given trust claim ("end-to-end encrypted", "your nsec never leaves your browser", "no recovery by design", "post-compromise security per epoch") is rendered once per surface, in the canonical place for that surface's content type. Repeating the same claim three or four times on the same screen is forbidden — repetition signals defensiveness, not confidence.

Why

Audit patterns #10, #15, #17 documented 9+ surfaces where the same trust claim was rendered 3-4 times within the same scroll: as a header sub-line, as a body paragraph callout, as a footer disclaimer, and as a tooltip. The cumulative effect is the opposite of trust. A confident product states its security guarantees once, in the right place, and trusts the user to remember them. A defensive product mentions the guarantee at every opportunity, which the user reads as "the team is trying to convince themselves."

There is also a content-architecture cost: when trust copy proliferates, no single instance is canonical. Editing the claim ("end-to-end encrypted" → "encrypted from device to device with NIP-EES") requires sweeping multiple files. A single source of truth makes the claim editable; multiplied claims drift.

How

Each trust claim has a canonical rendering surface:

Claim	Canonical surface
"End-to-end encrypted"	landing hero subtitle + once in onboarding; not on every messaging surface
"Your nsec never leaves your browser"	onboarding step + identity-create page; not on every signin
"No recovery by design"	passphrase-create page next to the input; not in the FAQ + the onboarding + the recovery-failure error
"Per-epoch post-compromise security"	groups onboarding + once in `/diagnostics/principles/F-7`; not in every group settings panel

Trust copy is rendered through <MetaRow variant="trust"> (Phase 1 Track B PR — <MetaRow> consolidation) which is gated to canonical surfaces by lint or convention.

Phase 5 deepens this stub with the full claim-to-surface map, audit counter-examples for each violation, and the trust-claim editorial review process.