Concepts
Decision
A decision is what ECZ-ID determined about one proposed action, before it ran. It is not the action, not its result and not a Receipt, and it never claims enforcement by itself.
Decisions issued by IntentControl are release-gated. Decisions your own system makes on live Resolver state are available today.
IntentControl today · measured 2026-10-10
- Commercial capability
- Coming soon · not yet on saleTrustOps lists every plan as coming soon. Nothing can be bought or provisioned yet.
- Signed-in operation
- Not yet availableThere is no signed-in operation until the service is confirmed live.
- Public developer interface
- Release-gatedThere is no public decision API, endpoint, credential format or SDK. Nothing is enforced by ECZ-ID.
Accountability Chain:Decision
Two kinds of decision
- Your local policy over live Resolver stateLive · publicYour system reads the record and decides. The verifier gives this a deterministic shape:
OPEN,PREFERorREQUIRE, with documented exit codes. - An IntentControl decisionRelease-gatedECZ-ID Core evaluates the action against the actor’s Intent, policy and state, and returns an outcome with per-check results.
What an IntentControl decision can say
| Outcome | What the enforcement point must do |
|---|---|
| Allow | Let the action run. It means the configured checks passed, nothing more. |
| Deny | Block. Never run the action. |
| Review | Hold. Do not run the action. An owner or admin approves or rejects it; an approval is single-use and expires. |
| Indeterminate | Block, unless a narrow low-consequence fail-open rule applies. |
| Unavailable | Block, unless the same rule applies. Never a statement about the action. |
A decision is valid for 30 seconds. Anything that is not a well-formed, in-date decision for this exact request (a timeout, a network error, an expired or mismatched answer) is treated as unavailable and blocks.
A decision is not the action, and not the Receipt
- An allowed action may still fail, be abandoned or never be sent. The decision says what was determined, not what happened.
- A decision Receipt records the decision. Only a separate mediation record evidences that an inline enforcement point applied it.
- A decision’s digest is unsigned. It identifies the decision; it proves nothing to a third party.
Related
This page is explanation, not authority. Current state is only ever the live Resolver record. Live facts on this page were measured read-only on 2026-10-10.