Skip to content
Reference: all pages

Reference

ResultStates reference

The verifier’s 18 ResultStates and exit codes, and the Resolver’s public state vocabularies.

Live · public

Live in production and publicly readable, with no account and no key. Measured read-only on 2026-10-10.

Contract
Public schemaA published, machine-readable schema or result contract you can validate against now.
Version
verifier result schema_version 1
Machine-readable
The verifier on npm (opens in a new tab)

Accountability Chain:Current stateRe-verify

Verifier ResultStates

Missing proof is NO_PUBLIC_RESOLVER_PROOF_FOUND, never a failed verification.
ResultStateMeaningReliance
RESOLVER_VERIFIABLEECZ-ID Core observed control evidence and Resolver projects a current public proof for the exact ECZ-ID target.Re-check before reliance. ECZ-ID Core remains final authority.
NO_PUBLIC_RESOLVER_PROOF_FOUNDNo public Resolver proof was found for the target. This does not mean unsafe. Local policy decides.Share resolver guidance. Local policy decides.
PARTIAL_PUBLIC_PROOF_FOUNDSome referenced bindings have public proof, others are missing.Re-check before reliance. Local policy decides.
SETUP_REQUIREDA binding or manifest reference is present but setup is incomplete; TrustOps setup is required by the operator.Start setup in TrustOps if you operate the target. Share resolver guidance if you do not.
CHALLENGE_ISSUEDTrustOps issued a challenge to the operator. Awaiting publication.Re-check before reliance.
OBSERVEDECZ-ID Core observed at least one signal. Verification is incomplete.Re-check before reliance.
DEGRADEDSome signals present, some missing or stale.Local policy decides. Re-check before reliance.
MISMATCHAn observed value does not match the canonical record (for example manifest_hash_mismatch).Do not infer safety. Local policy decides.
EXPIREDPrevious proof has lapsed.Re-check before reliance. Start setup in TrustOps if you operate the target.
SUSPENDEDA lifecycle hold has been applied by the operator or by TrustOps.Local policy decides.
REVOKEDThe operator or registry revoked the binding.Do not infer safety. Local policy decides.
NOT_APPLICABLEThe check does not apply to the target type.Local policy decides.
UNSUPPORTED_TARGETThe target type is not supported by this verifier.Local policy decides.
LEGACY_ALIAS_NOT_ACTIVE_SKUThe reference points at a legacy SKU alias that is no longer an active sellable product. Refer the operator to the current canonical SKU registry in TrustOps.Refer the operator to the current canonical SKU in TrustOps.
REJECTED_PRODUCT_NOT_SELLABLEThe reference points at a product that is not offered publicly.Do not promise checkout. Share resolver guidance only.
DEFERRED_PRODUCT_NOT_SELLABLEThe reference points at a product that is not currently offered as a live product.Do not promise checkout. Share resolver guidance only.
PARENT_UPGRADE_REQUIREDThe requested binding or package requires the parent ECZ-ID at a higher tier.Start setup in TrustOps to upgrade the parent tier.
UNKNOWN_PHASE1_SKUThe reference cites a Phase 1 SKU that is unknown to the canonical product registry.Refer the operator to the current canonical SKU in TrustOps.

Verifier exit codes

From the verifier’s own help text, v0.9.0. Exits 0 and 1 measured on 2026-10-09.
ExitMeaning
0OK, informational, resolver-verifiable, or missing proof under OPEN
1Policy-required proof missing or unresolved under REQUIRE
2Deterministic mismatch
3Revoked, suspended or expired
4Unsupported target or invalid input
5Network or timeout error where policy requires fail-closed
6Internal verifier error

Resolver state vocabularies

The state axes themselves are listed on the Current state concept page and in the Resolver output reference.
FieldValues
state.reliance_levelPARENT_IDENTITY_ONLY, PARENT_IDENTITY_AND_PROFILE, PARENT_IDENTITY_PROFILE_AND_BINDINGS, FULL_ACTIVE_PROOF, FAIL_CLOSED, PUBLIC_PROJECTION_UNAVAILABLE
machine_policy.fail_closed_statesREVOKED, SUSPENDED, DEGRADED, MISMATCH, PROOF_UNAVAILABLE, PUBLIC_PROJECTION_UNAVAILABLE, ACTIVE_ABUSE_FLAGGED, UNKNOWN
public_projection.record_provenance_classCURRENT, LAST_KNOWN, LEGACY_DEMONSTRATION, UNAVAILABLE
Kernel signal statesPASS, DEGRADED, FAIL, UNAVAILABLE, NO_HISTORY
Receipt retrieval statesAVAILABLE, NONE_PUBLISHED, UNAVAILABLE, NOT_PUBLISHED

This page is explanation, not authority. Current state is only ever the live Resolver record. Live facts on this page were measured read-only on 2026-10-10.