Sole public proof surface
Resolver Proof
Resolver is the sole public proof surface. Anything that looks like proof but is not Resolver is not proof.
Role split
- Resolver is the public proof surface
- TrustOps controls lifecycle
- Developer Gateway explains
- Resolver is the only place to confirm current state publicly
What Resolver can show
- Current state of an Agent Credential or API Passport
- Authorised origins associated with the credential
- Manifest URL pointer
- Declared API dependencies
- Lifecycle state, including mismatch, revoked, suspended, or stale states where implemented
What cannot replace Resolver
- Copied JSON
- Screenshots or PDFs of past states
- Marketplace listings
- Browser or VS Code extension panels
- Stale manifests or mirror documents
Canonical Resolver URL
- Public Resolver: https://resolver.ecocitizenz.org
ECZ-ID separates setup, verification state, and public proof. Developer Gateway documents setup paths and verifier guidance. TrustOps handles setup. Resolver remains the public proof surface. Re-check before reliance. Local policy decides.
