[Feature]: Manual Trust Score adjustment in User Profile + Silent & Time-based Trust Score recovery

[Lorgie1984]

Describe the feature

Currently, the only way to recover a user's Trust Score after a violation is by creating a dedicated recovery rule. However, every rule trigger creates a Violation entry — even if the intent is purely administrative (score recovery). This pollutes the violations list with non-actionable entries and makes it harder to distinguish real violations from housekeeping events.

Additionally, there is no way to manually adjust a user's Trust Score directly from their profile in the UI.

Three related improvements:

1. Manual Trust Score adjustment in the User Profile
   Add an inline edit option or a dedicated button/modal in the user's profile page to directly set or adjust the Trust Score — similar to how violations can be dismissed manually. No rule required, no violation created.

2. Silent Trust Score rule actions (no Violation created)
   Add an option on rule actions of type "Adjust Trust Score" / "Set Trust Score" / "Reset Trust Score" to run without creating a Violation entry — i.e., a pure administrative action with only an audit log entry (if any). This would be useful for scheduled recovery rules that should not appear in the violations list.

3. Time-based automatic Trust Score recovery
   Add a configurable automatic recovery mechanism: if a user has had no violations for a configurable period of time (e.g. 3 days), automatically apply a configurable Trust Score adjustment (e.g. +10 points, capped at 100). Both the time window and the recovery amount should be fully configurable. This recovery should ideally run silently (see point 2) without generating a Violation entry.

This would make Trust Score management significantly cleaner, especially for setups with multiple shared users where periodic score recovery is needed without generating noise in the violations dashboard. The time-based recovery in particular would allow Trust Scores to naturally recover over time for well-behaved users, without any manual intervention or rule noise.

Examples or references

Example configuration:

Recovery after: 3 days without violation  (configurable)
Recovery amount: +10                       (configurable)

Platform

• Web Dashboard
• Mobile App
• Server / API

[connorgallopo]

This is already in the latest rules engine