Skip to main content

Free Tool: STIR/SHAKEN Attestation Checklist

The STIR/SHAKEN attestation checklist is a free, browser-side self-assessment on the developer tools hub. Pick the A/B/C level you want your outbound US voice traffic to reach, mark the five read-by-experience steps you already have covered, and the panel reports placement in plain language against that level and links each open item to the docs page that documents it — no account required. Everything on the page is advisory: attestation levels are earned against Orbit’s ownership resolution (owned → A, leased → B, certificate-raised BYON → B, else C) and carried by the upstream signing carrier — never asserted by this page. STIR/SHAKEN posture is tenant-owned — you declare the target and configure the controls, and the checklist only reports the coverage you self-attest.

What the checklist walks

  1. Attestation floor set — the reporting policy that declares your target level, downgrade handling, and per-DID inbound floor. The policy fields classify what the posture snapshot reports; they never raise what gets signed, reroute a call, or block one at dial time (STIR/SHAKEN posture guide).
  2. Branded-calling profile configured — for A-eligible traffic, wire the branded-calling (Rich Call Data) profile so the signed PASSporT carries your display name, and register CNAM as the fallback where RCD does not land (Branded calling (RCD)).
  3. Voice signature enrolled — enroll the voice signature for your outbound lane so the call carries a verifiable identity artifact alongside the attestation the softswitch signs (Voice signatures).
  4. Evidence crosswalk retrieved — pull the evidence-to-posture crosswalk so the production behaviour Orbit stakes its correctness on (origination-level resolution to A, B, or C, signalled to the softswitch) maps to the posture you operate (STIR/SHAKEN evidence crosswalk).
  5. ITG traceback path understood — signed traffic carries the downstream obligation to answer Industry Traceback Group requests implicating your originating numbers: log each case, file the disposition, and watch the response deadline (ITG traceback handling).
Each item links to the same docs pages from the tool itself, so a visitor can open the controls without signing up.
The reads are a summary layer over the deep lane — the STIR/SHAKEN posture guide, branded calling, voice signatures, the evidence crosswalk, and ITG traceback handling are the authoritative references, and the tool links them from each item.

Tenant-owned framing

Every step on the checklist is tenant-owned: the checklist questions a posture you configure on your own workspace. Orbit does not mandate a target level — the attestation floor reports what you declare, and the legal determination of which level your traffic should reach is yours to make with counsel. What Orbit supplies is the evidence surface: the posture snapshot, the branded-calling profile, the enrolled voice signature, and the crosswalk that maps production behaviour to posture. Nothing on the tool page enforces or verifies the coverage you mark — the self-assessment is exactly that. This tool is not legal advice.

When to use it

Run the checklist as the pre-delegated-certificate-purchase self-attestation before a tenant entrusts BYON or pool-assigned numbers to remediating deliverability: it names the five reads the compliance owner must have already covered — floor declared, branded calling profiled, signature enrolled, crosswalk pulled, traceback path filed — so a downstream “Spam Likely” label on C-attested traffic never comes as a surprise. Re-run it after a certificate re-issue, a branded-calling re-verification, or a softswitch-level downgrade in the posture snapshot; a fresh self-check takes under a minute.

Relation to the A/B/C ladder

The checklist’s target-level selector mirrors the level-resolution model documented on STIR/SHAKEN attestation: owned numbers resolve to A, leased / pool-assigned numbers resolve to B, and a registered delegate certificate raises BYON from C to B — a deliberately hard ceiling, because a self-registered artifact must never be able to spoof full attestation. The posture guide and evidence crosswalk sequence the controls, and this checklist names which controls to walk in order. See STIR/SHAKEN attestation for the verbatim resolution rules.

See also