Skip to main content

Trust Graph Lens Matrix

What each party sees when they look at every other party


The Governing Principle

Same underlying data. Different views per relationship type. Derived signals for third parties — never raw records. Progressive consent: standard → with consent → advanced consent. AI generates all derived representations. Raw records are never exposed. The lens matrix does not change the underlying data. It changes what is visible based on relationship context and consent.

View 1: Buyer or Resident → Principal

PUBLIC STANDARD (no consent required):
  ✓ Verification tier (PROVISIONAL / PHONE / NIN / DOCUMENT)
  ✓ Portfolio size (banded: 1–5, 6–20, 20+, never exact)
  ✓ Average tenancy duration across portfolio
  ✓ Dispute rate (per 100 tenancies, anonymized)
  ✓ Response time to maintenance requests (average days)
  ✓ Deposit return rate (% full / % partial / % withheld)
  ✓ Years active on Leja
  ✓ Property condition rating (derived from exit inspections)
  ✓ Rent increase pattern (stable / frequent / aggressive)

WITH LANDLORD CONSENT (landlord opts in per relationship):
  ✓ Previous tenant references (anonymized summaries — no names)
  ✓ Maintenance completion history (job types and resolution times)
  ✓ Full dispute history with outcomes
  ✓ Agent relationship history (who they work with, how long)

NEVER VISIBLE:
  ✗ Exact unit count
  ✗ Rental income or financial performance
  ✗ Personal address or direct contact
  ✗ Other tenant identities
  ✗ Ownership documents

View 2: Buyer or Resident → Agent (Solo or Org Staff)

PUBLIC STANDARD:
  ✓ Verification tier and LASRERA registration status
  ✓ Organisation affiliation (BRN name and role within org)
  ✓ Deals closed (banded: 1–10, 11–50, 51–200, 200+)
  ✓ Property type specializations
  ✓ Average time to close a deal
  ✓ Client satisfaction score (derived from post-transaction ratings)
  ✓ Dispute rate and resolution record
  ✓ Response time to inquiries (average hours)
  ✓ Document compliance quality score
  ✓ Years active on Leja

WITH AGENT CONSENT:
  ✓ Deal history summaries (anonymized — no client names)
  ✓ Landlord relationship quality
  ✓ Professional certifications and memberships

NEVER VISIBLE:
  ✗ Commission rates or earnings
  ✗ Client identities
  ✗ Financial revenue data
  ✗ Internal operations or pipeline details

View 3: Buyer or Resident → Organisation (BRN)

PUBLIC STANDARD:
  ✓ BRN verification status
  ✓ CAC registration confirmed
  ✓ LASRERA permit status (Lagos-based firms)
  ✓ Years in operation
  ✓ Operating states
  ✓ Staff count (banded: 1–5, 6–20, 20+)
  ✓ Deals closed at firm level (banded)
  ✓ Firm-level dispute rate
  ✓ Firm-level client satisfaction score
  ✓ Property specializations

WITH ORG CONSENT:
  ✓ Key staff Trust Graph summaries
    (requires BOTH org consent AND individual staff consent)

NEVER VISIBLE:
  ✗ Client identities
  ✗ Staff personal residential data
  ✗ Revenue or financial data
  ✗ Internal operations or commission structures

View 4: Buyer or Resident → Property (Property RIN)

PUBLIC STANDARD:
  ✓ Verification tier (PROVISIONAL / COMMUNITY_VERIFIED / INSPECTED)
  ✓ Building age (banded)
  ✓ Previous tenancy count (no tenant identities)
  ✓ Average tenancy duration
  ✓ Maintenance history (issue types and resolution times)
  ✓ Last inspection date and condition rating
  ✓ Utility connection status (electricity, water, waste)
  ✓ Dispute history (count and category — no party identities)
  ✓ Rent band history (rising / stable / falling — not exact amounts)
  ✓ Known recurring issues log
  ✓ Neighborhood trust score (aggregated from area)
  ✓ REAL-TIME STATUS:
      AVAILABLE / UNDER_OFFER / OCCUPIED / SHORT_LET_ACTIVE

WITH OWNER CONSENT:
  ✓ Exact previous rent amounts
  ✓ Detailed maintenance reports
  ✓ Exit inspection photos (anonymized — no tenant identities)

NEVER VISIBLE:
  ✗ Previous tenant identities
  ✗ Exact rent unless owner consents
  ✗ Landlord personal details beyond verification
  ✗ Any service provider identity from maintenance jobs

View 5: Principal → Buyer or Resident

PUBLIC STANDARD:
  ✓ RIN verification tier
  ✓ Score tier (Bronze / Silver / Gold / Platinum)
  ✓ Payment timeliness rate (% on time)
  ✓ Tenancy duration pattern (average months per tenancy)
  ✓ Exit quality history (% clean exits)
  ✓ Dispute history (count and initiating party)
  ✓ Time on Leja platform

WITH TENANT CONSENT (standard for rental application):
  ✓ Detailed payment consistency breakdown
  ✓ Previous property types and rent bands (not addresses)
  ✓ Seller attestations from previous landlords and agents
  ✓ Behavioral trend (improving / stable / deteriorating)
  ✓ Full Trend timeline (LGA level only — never exact addresses)

WITH ADVANCED CONSENT (tenant chooses for premium properties):
  ✓ Employment stability signal (AI-derived, not raw income data)
  ✓ Income band estimate (derived from rent progression + service income)
  ✓ Guarantor information (if tenant provides)

NEVER VISIBLE:
  ✗ Exact previous addresses
  ✗ Previous landlord identities
  ✗ Exact income or bank details
  ✗ Any data the tenant has not explicitly consented to share
  ✗ Which other properties they are currently applying for

View 6: Agent (Solo or Org Staff) → Buyer or Resident

Everything in View 5 (Principal → Buyer or Resident), PLUS WITH CONSENT:
  ✓ Deal seriousness score (AI-derived from Track 3 behavior)
  ✓ Document readiness signal (% of required docs already prepared)
  ✓ Budget signal (derived from search behavior + rent history)
  ✓ Timeline urgency (derived from search intensity + lease end date)
  ✓ Previous agent relationship quality
    (completed deals vs. repeated drop-offs — commitment signal)
  ✓ Market knowledge signal (how long searching, views per decision)

NEVER VISIBLE:
  ✗ Which other agents they are currently working with
  ✗ Exact financial data
  ✗ Private life or personal details
  ✗ Other simultaneous applications

View 7: Bank/Lender → Buyer or Resident

STANDARD TIER (RIN holder consent required):
  ✓ Score tier and raw score
  ✓ Payment timeliness rate (statistical)
  ✓ Tenancy stability score
  ✓ Identity verification tier
  ✓ Housing trajectory (rent band progression over time)

ADVANCED TIER (purpose-specific consent per institution required):
  ✓ Financial stress indicators
    (payment timing shifts, partial payment patterns, recovery behavior
     — signals credit bureaus cannot see from banking data alone)
  ✓ Housing stability score (AI-derived mortgage default predictor)
  ✓ Service income stability signal (from Track 2, if applicable)
  ✓ Geographic stability profile (mobility pattern — no exact locations)
  ✓ FEDERATED COMPUTATION ENDPOINT:
      Bank submits proprietary risk model parameters →
      Leja AI runs the model against anonymized three-track data →
      Bank receives the output score only
      Raw data never leaves Leja's infrastructure
  ✓ Comparative percentile (position vs. anonymized Leja population)

GOVERNMENT / REGULATORY (legal order + user consent):
  ✓ Identity confirmation only: "this RIN holder is who they claim" (yes/no)
  Nothing else without explicit user consent

NEVER WITHOUT EXPLICIT USER CONSENT:
  ✗ Raw transaction records
  ✗ Property addresses
  ✗ Landlord or agent identities
  ✗ Any derived data the user has not consented to share

View 8: Service Provider → Service Request

BEFORE ACCEPTING THE JOB:
  ✓ Job type and full description
  ✓ Approximate location (2km radius — never exact address)
  ✓ Property type (flat / house / commercial / estate)
  ✓ Urgency level (emergency / standard / flexible)
  ✓ Budget range (if provided by requester)
  ✓ Requester's service behavior history:
      payment timeliness on previous jobs
      clear communication pattern
      showed up for scheduled appointments
      dispute history with previous providers
  ✓ Relevant property maintenance context
      (from Property RIN — recurring issues that match this job type)

AFTER MUTUAL ACCEPTANCE:
  ✓ Exact address revealed
  ✓ Direct contact unlocked via platform messaging

NEVER VISIBLE:
  ✗ Requester's full residential identity
  ✗ Financial details beyond this job's payment
  ✗ Personal life details

View 9: Anyone → Service Provider

PUBLIC STANDARD:
  ✓ Verification tier (identity, CAC where applicable, trade certifications)
  ✓ Specific certifications claimed and issuing bodies named
  ✓ Certification expiry dates (if applicable)
  ✓ Trade categories and specializations
  ✓ Operating areas (LGA level)
  ✓ Jobs completed (banded: 1–10, 11–50, 51–200, 200+)
  ✓ Rating score and review summaries (most recent 10 reviews)
  ✓ Average response time to job requests
  ✓ Average job completion time for each category
  ✓ Payment dispute rate
  ✓ Repeat hire rate — this is the strongest trust signal on the platform
  ✓ Years on Leja

NEVER VISIBLE:
  ✗ Personal address
  ✗ Income or total earnings
  ✗ Client identities from previous jobs
  ✗ Private contact information

Standard consent is granted when a user submits a rental application. It covers: Score tier, payment timeliness rate, tenancy duration, exit quality. It does not expire automatically — but the user can revoke it at any time. Advanced consent is granted explicitly per institution per purpose. It requires a named institution, named purpose, time limit, and explicit acknowledgment (checkbox + PIN or biometric). See 10_Compliance/01_ndpa_consent_framework.md for full language requirements. Federated computation consent is a separate consent with specific language:
  • Named institution
  • Explicit statement that raw data stays on Leja’s servers
  • Time limit (30 days or per-application)
  • Revocation path clearly stated