Skip to content
ECZ-IDDevelopers
Concepts: all pages

Concepts

Identity

An ECZ-ID is a persistent, publicly resolvable identifier for one accountable organisation or one logical machine it operates. It names who acts. It does not say whether they may.

Live · public

Live in production and publicly readable, with no account and no key. Measured read-only on 2026-10-10.

Accountability Chain:Identity

What an ECZ-ID is

Every ECZ-ID belongs to an accountable organisation. The organisation holds a Business Passport, the parent record, with an identifier such as ECZ-GB-RBS1NW. Each machine it operates can hold a child Passport in one of seven families, with an identifier formed from the parent: ECZ-GB-RBS1NW::AGENT_PASSPORT-XXXXXX.

Persistent
The identifier survives versions, deployments, replicas, regions and platforms. Those are bindings or history, never new identities.
One subject, one ECZ-ID
The acquisition contract states it as law. Asking twice for the same subject returns the identity you already hold.
Resolvable
Anyone can read the public record live at the Resolver, with no account and without the operator’s cooperation.
Accountable
A child Passport always resolves to its operating organisation. There is no anonymous machine identity in ECZ-ID.

Identity is not authority

Knowing who acts is the first link, not the whole chain. A Passport says which organisation stands behind a machine. It never says what that machine may do. The live record says so in its own words: “This identity has not issued an Agent Credential. Do not infer agent authority from the parent ECZ-ID.”

An ECZ-ID establishes

  • which organisation operates the machine
  • that organisation’s current tier and lifecycle state
  • which native identities it has bound, where proven
  • what the record said at the moment you read it

An ECZ-ID never establishes

  • that the machine may take a particular action
  • that it is safe, secure, correct or compliant
  • that any scope or credential was delegated to it
  • that a relationship shown is live in production

Absence is not a verdict

When no public record exists the answer is NO_PUBLIC_ECZ_ID_FOUND. The contract is explicit that this is not UNSAFE, not UNTRUSTED and not FAILED_TRUST_CHECK. Your policy may still require a record before reliance; it may not report its absence as a negative finding about the target.

Related

This page is explanation, not authority. Current state is only ever the live Resolver record. Live facts on this page were measured read-only on 2026-10-10.