Concepts
The Accountability Chain
The ten links ECZ-ID makes answerable for a machine action: identity, authority, delegation, Intent, current state, decision, action, Receipt, evidence and re-verify.
Accountability Chain:IdentityAuthorityDelegationIntentCurrent stateDecisionActionReceiptEvidenceRe-verify
Ten questions, in order
A machine action is accountable when someone who was not present can answer, afterwards and without asking the operator, who acted, on whose authority, within what bounds, against what state, under what decision, what was recorded, and what evidence a stranger can re-verify. ECZ-ID gives each of those questions a defined place to be answered.
- 01IdentityWho or what is acting?Live · public
- 02AuthorityWho or what authorised it?Live · signed in
- 03DelegationWhat authority was delegated?Live · signed in
- 04IntentWhat does it intend to do?Live · signed in
- 05Current stateWhat state and policy apply now?Live · public
- 06DecisionShould the action proceed?Release-gated
- 07ActionWhat action was taken?Your system
- 08ReceiptWhat receipt exists?No public retrieval
- 09EvidenceWhat evidence supports it?No public retrieval
- 10Re-verifyHow can it be re-verified?Live · public
Where each link lives today
- IdentityLive · publicBusiness Passport plus seven free Passport families; public records at the Resolver.
- Authority and delegationLive · signed inRecorded on each ECZ-ID Intent when an owner or admin authorises it in the TrustOps Dashboard.
- IntentLive · signed inECZ-ID Intent is live and sold through TrustOps. There is no public developer API, and the public Intent disclosure is not enabled.
- Current stateLive · publicResolver projection contract 2.1.0, read live from api.ecocitizenz.com.
- DecisionRelease-gatedIntentControl is documented ahead of release. Commercially: coming soon in TrustOps and not yet on sale. Signed-in operation: not yet available. Public decision API: none.
- ActionYour systemYour system acts. ECZ-ID never executes an action.
- ReceiptNo public retrievalCore records receipts today. Public retrieval and public verification are not enabled. Receipts plans: not yet on sale in TrustOps.
- EvidenceNo public retrievalField provenance is public on every record. Receipt evidence and LedgerCore anchors are held by Core and are not publicly retrievable; production ledger anchoring is not yet proven.
- Re-verifyLive · publicAnyone can re-resolve a public record at any time, with no account.
What the chain is not
- It is not a safety rating. No link says a machine is safe, secure, correct, compliant or approved.
- It is not a single object. Each link is a separate record with its own owner, and passing one never stands in for another: identity is not authority, and authority is not Intent.
- It is not universal mediation. A decision only constrains an action that is routed through an enforcement point. Everything else is evaluated or observed, never enforced.
Related
This page is explanation, not authority. Current state is only ever the live Resolver record. Live facts on this page were measured read-only on 2026-10-10.