Reference
Bindings reference
Binding classes per family, the Resolver’s public binding states and the binding registry lifecycle.
The binding block is live in every public record. Declared bindings are shown as declared. No public record carries a proven binding (BOUND) today: proven bindings are not yet available in production.
- Contract
- Public Resolver projectionWhat the public Resolver serves today: read-only, no key, readable cross-origin.
- Version
resolver_v2 · projection 2.1.0- Machine-readable
- A live binding block (opens in a new tab)
Accountability Chain:IdentityCurrent state
Binding classes by family
| Family | Binding classes the contract defines |
|---|---|
| Agent | deployment_binding, well_known_manifest, a2a_card, provider_registration |
| MCP | mcp_registry_entry, mcpb_desktop_bundle, mcp_remote_http, mcp_local_stdio |
| Plugin | marketplace_listing, openai_gpt_actions, shopify_app_surface, microsoft_app_registration, github_action_reference |
| API | API_ORIGIN, OPENAPI_SPEC, WEBHOOK_ENDPOINT, DOMAIN_DNS_TXT, jwks_uri |
| IoT | SERIAL_NUMBER, MAC_ADDRESS, FIRMWARE, GATEWAY, HUB_REGISTRATION |
| SDK | PACKAGE_REGISTRY, REPO, GITHUB_OIDC, GITLAB_OIDC, OCI_IMAGE |
| Service & Workload | aws_iam_role, gcp_workload_identity, entra_workload_identity, spiffe_id, kubernetes_service_account, oidc_issuer, nvidia_nemo_workflow |
Public binding states (resolver_v2.binding.state)
| State | Meaning |
|---|---|
BOUND | Proven when last verified. Current-state evidence: re-check before reliance. |
NO_PUBLIC_PROOF | No public binding proof. The normal state of a new record. |
MISMATCH | An observed value does not match the record. |
REVOKED | The binding was revoked. |
SUSPENDED | The binding is on hold. |
DEGRADED | Some signals present, some missing or stale. |
PROOF_UNAVAILABLE | The proof could not be read now. |
NOT_PUBLISHED | Not published on the public record. |
UNKNOWN | Not determinable. Fail closed. |
Binding lifecycle
Inside ECZ-ID a binding moves through CLAIMED, CHALLENGE_ISSUED, OBSERVED and BOUND, and can become DEGRADED, SUSPENDED, REVOKED, EXPIRED or MISMATCH. A binding reaches BOUND only through Core’s challenge and evidence verification. Payment never creates a binding, and there is no “verified” binding state.
Related
This page is explanation, not authority. Current state is only ever the live Resolver record. Live facts on this page were measured read-only on 2026-10-10.