Reference
ReasonCodes reference
Every public ECZ-ID reason-code vocabulary, which surface emits it, and which registries are deliberately not public.
Live · public
Live in production and publicly readable, with no account and no key. Measured read-only on 2026-10-10.
- Contract
- Public Resolver projectionWhat the public Resolver serves today: read-only, no key, readable cross-origin.
- Version
rcv-1.0.0- Machine-readable
- Codes in a live record (opens in a new tab)
Accountability Chain:Current stateDecision
Registries
| Registry | Emitted by | Visibility |
|---|---|---|
rcv-1.0.0 | Resolver public projection, per state axis | Public. Frozen: codes are never renamed. |
| Verifier ReasonCodes | The ECZ-ID MCP Verifier result contract | Public |
igc-1.0.0 | ECZ-ID Intent, IntentControl and Graph Intelligence | Authenticated or internal only. Never listed publicly. |
rcp-1.0.0 | Receipts service refusals | Authenticated |
Resolver reason codes (rcv-1.0.0)
| Code | Axis | Meaning |
|---|---|---|
PROFILE_VERIFIED_PUBLIC | subject_state | A published profile verification milestone was recorded. |
ENTITY_SUSPENDED_PUBLIC | subject_state | The subject is suspended (recoverable) per canonical lifecycle. |
ENTITY_REVOKED_PUBLIC | subject_state | The subject is revoked (terminal) per canonical lifecycle. |
ENTITY_REINSTATED_PUBLIC | subject_state | The subject was reinstated from a prior suspension. |
PARENT_TIER_CHANGED_PUBLIC | subject_state | The parent tier changed per a canonical tier event. |
ABUSE_FLAGGED_PUBLIC | subject_state | An abuse signal was recorded against the subject. |
ABUSE_CLEARED_PUBLIC | subject_state | A prior abuse signal was cleared. |
PROOF_STALE_PUBLIC | freshness_state | The published proof is past its freshness window (still within tolerance). |
PROOF_EXPIRED_PUBLIC | freshness_state | The published proof is past valid_until and is no longer current. |
NO_OBSERVATION_PUBLIC | freshness_state | No current observation exists for the selected scope. |
FRESHNESS_UNDETERMINABLE_PUBLIC | freshness_state | Freshness cannot currently be computed; re-check before reliance. |
NOT_ENROLLED_PUBLIC | enrolment_state | The capability is not enrolled. This is neutral, not adverse. |
PENDING_ENROLMENT_PUBLIC | enrolment_state | Enrolment is pending. |
NOT_PUBLISHED_PUBLIC | publication_state | No public proof state is published for the selected scope. |
WITHHELD_BY_POLICY_PUBLIC | publication_state | Disclosure is withheld by the active disclosure policy. |
ENTITLEMENT_LAPSED_PUBLIC | entitlement_state | A commercial entitlement lapsed. Entitlement is not proof. |
QUOTA_EXHAUSTED_PUBLIC | entitlement_state | A commercial quota is exhausted. |
ADD_ON_ENDED_PUBLIC | entitlement_state | An optional add-on ended. |
VERIFICATION_UNAVAILABLE_PUBLIC | verification_service_state | The verification service is temporarily unavailable. This is a service condition, not subject degradation. |
RECEIPT_VERIFICATION_UNAVAILABLE_PUBLIC | receipt_verification_state | A receipt could not be verified right now. This does not change subject state. |
RECEIPT_RECORDED_PUBLIC | receipt_verification_state | A receipt reference is recorded but not independently verified. |
MANDATORY_DEPENDENCY_ADVERSE_PUBLIC | subject_state | A mandatory dependency is in an adverse state. |
MANDATORY_DEPENDENCY_MISSING_PUBLIC | subject_state | A mandatory dependency is missing; the package is insufficient (not adverse). |
MANDATORY_DEPENDENCY_UNAVAILABLE_PUBLIC | subject_state | A mandatory dependency is unavailable; the package is unavailable (not adverse). |
MANDATORY_DEPENDENCY_EXPIRED_PUBLIC | subject_state | A mandatory dependency's proof expired; the package is insufficient (not adverse). |
MANDATORY_DEPENDENCY_REVOKED_PUBLIC | subject_state | A mandatory dependency is revoked; the package fails closed. |
OPTIONAL_COMPONENT_ISSUE_PUBLIC | subject_state | An optional component has an issue; the aggregate is unchanged. |
RECORD_UNAVAILABLE_PUBLIC | record_provenance_class | The current canonical state is temporarily unavailable. |
LAST_KNOWN_STATE_PUBLIC | record_provenance_class | The displayed state is the last known canonical state. |
LEGACY_DEMONSTRATION_PUBLIC | record_provenance_class | This is a legacy demonstration record and is not a live proof claim. |
Verifier ReasonCodes
| Code | Group | Meaning |
|---|---|---|
OPERATOR_PROOF_NOT_FOUND | Operator | No public Resolver proof was found for the declared parent operator ECZ-ID. |
ORIGIN_PROOF_NOT_FOUND | Operator | No proof binding the declared origin to the parent ECZ-ID was found. |
MANIFEST_NOT_FOUND | Manifest | The declared .well-known manifest could not be fetched. |
MANIFEST_HASH_MISMATCH | Manifest | The observed manifest hash does not match the canonical declared hash. |
AGENT_CREDENTIAL_NOT_FOUND | Agent | No public Resolver proof was found for the declared Agent Credential. |
API_PASSPORT_NOT_FOUND | API | No public Resolver proof was found for the declared API Passport. |
API_PASSPORT_MISMATCH | API | The API Passport reference points at an origin or spec that does not match the canonical record. |
IDENTITY_CONTINUITY_NOT_FOUND | Continuity | No public Identity Continuity proof was found across the referenced lifecycle. |
SOFTWARE_SUPPLY_CHAIN_PROOF_NOT_FOUND | Supply chain | No public software supply chain / SBOM proof was found for the referenced release. |
KEYSET_HASH_MISMATCH | Cryptography | The observed JWKS / keyset hash does not match the canonical declared hash. |
PULSEGUARD_STALE | Liveness | Operator liveness pulse (PulseGuard) is stale beyond policy. |
REVOKED_PARENT | Lifecycle | The parent ECZ-ID is currently revoked. |
REVOKED_AGENT_CREDENTIAL | Lifecycle | The Agent Credential is currently revoked. |
SUSPENDED_API_PASSPORT | Lifecycle | The API Passport is currently suspended. |
DECLARED_PARENT_CANNOT_ACTIVATE | Role-split | The declared parent tier cannot activate the requested binding without an upgrade in TrustOps. |
EXTERNAL_COMMERCE_CANNOT_ACTIVATE_PROOF | Role-split | External subscription or commerce surfaces handle acquisition only. They cannot create or change verification state. |
TRUSTOPS_CANNOT_MARK_BOUND | Role-split | TrustOps handles setup and lifecycle. It does not itself create or change verification state on the public proof surface. |
RESOLVER_READ_ONLY | Role-split | Resolver is public read-only proof. It cannot accept setup, checkout, or directory queries. |
MARKETPLACE_CHECKOUT_NOT_ALLOWED | Role-split | Developer Gateway and verifiers do not host checkout. Route commercial CTAs to TrustOps. |
LOCAL_POLICY_DECIDES | Policy | The relying party policy decides whether to allow, warn, or require based on the reported ResultState and ReasonCodes. |
Related
This page is explanation, not authority. Current state is only ever the live Resolver record. Live facts on this page were measured read-only on 2026-10-10.