Concepts

A persistent ECZ-ID for the actor, in one of seven machine families, under an accountable Business Passport.

• Business Passport
• Seven Passport families
• Bindings

The accountable principal and role that authorised the work, recorded on the Intent, never inferred from a Passport.

A delegated Intent may only narrow its parent. Depth is bounded and revocation cascades.

The authorised objective and its bounds: actions, resources, destinations, parameters, value, data classes, rate and time window.

Lifecycle, tier, binding, freshness and evidence state, read live from the Resolver at the moment of reliance.

IntentControl evaluates the proposed action against identity, authority, delegation, Intent, policy, current state and constraints.

• IntentControl
• Enforcement modes

The action runs, or does not, in your system. ECZ-ID never executes it; an enforcement point can only allow, hold or block it.

A retrievable evidence object for a recorded event, decision, action, result or state. Core records receipts today; public retrieval is not enabled.

Every public record field carries its provenance (declared, or evidence-supported), live at the Resolver. Deeper evidence, Receipts and LedgerCore anchors, is held by Core and is not publicly retrievable. Integrity is not truth.

• LedgerCore

Anyone re-resolves the public record at the Resolver, live, with no account. A record is never cached as truth.