Yes. The idea is to build it to be agnostic to the objects whose trust is being tracked, but for Matrix at least the main building blocks are rooms, users, communities, servers, messages & attachments. However you could use it for other things too if you so wanted (eg client IPs, server IPs, netblocks, ASes, E.164 numbers, URLs etc)