Skip to content
Concepts: all pages

Concepts

Bindings

A binding attaches an ECZ-ID to a native identity the machine already has: a registry entry, an origin, an OpenAPI description, a package or a workload identity. A declaration points; only a proven binding proves.

Live · public

Declared bindings are live: the Resolver shows each one as declared. Proven bindings (BOUND) are not yet available in production, and no public record carries one today, so every binding you read is a declaration until that changes.

Accountability Chain:IdentityCurrent state

Declare, then prove

ECZ-ID does not invent a new place to put identity. A machine declares its ECZ-ID where its ecosystem already looks: an MCP server in .well-known/ecz-mcp.json and its registry entry, an agent in its A2A card or .well-known/ecz-agent.json, an API in x-ecz-id on its OpenAPI info, an SDK in its package manifest.

A declaration

  • is published by the operator
  • says “look here”
  • proves nothing on its own
  • can be copied by anyone

A proven binding

  • is established through ECZ-ID Core
  • appears in the Resolver’s binding block
  • is current-state evidence with a re-check date
  • never stays proven by itself

Read the binding state, live

The only public statement of whether a binding is proven is resolver_v2.binding in the live record. NO_PUBLIC_PROOF with reason code NO_PUBLIC_BINDING_PROOF_AVAILABLE is the normal state of a new record, not a deficient one.

Resolver binding stateRead it as
BOUNDProven when last verified. Re-check before reliance.
NO_PUBLIC_PROOFNo public binding proof. Do not infer control.
MISMATCHAn observed value does not match the record. Fail closed for high-risk use.
REVOKED · SUSPENDED · DEGRADEDLifecycle holds. Fail closed for high-risk use.
PROOF_UNAVAILABLE · NOT_PUBLISHED · UNKNOWNNot readable now. Unreadable is not absent and not proven.

Binding classes by family

Each family’s contract names the classes of native identity it can bind. A class being defined is not a claim that a live integration exists with that provider. The full table is in the bindings reference, and the earlier per-surface guides remain at /bindings/.

This page is explanation, not authority. Current state is only ever the live Resolver record. Live facts on this page were measured read-only on 2026-10-10.