A few questions:
- have you drafted or implemented any NIPs for attestations?
- have you considered non-hierarchical taxonomies?
- do you recognize a difference between automatic curation (which I think you're after) and trust hints for manual curation?
In the case of zap.store (it's an appstore, not a physical products store) users will *never* have applications auto-installed because their Grapevine told them it's okay. There's a concious decision during a manual approval of whether to install an application or not. A strong WoT is there to help transmit high signal.
To be honest with you, Tapestry sounds well thought out but I have a million things to do and can't dive deep into it. Have you thought of putting something simpler out there, and let dev feedback guide the design instead? (I guess something like nostr vs bluesky)