{
  "schema_version": "ecz-machine-v1",
  "asset_version": "1.0.0",
  "asset_type": "surface_manifest",
  "canonical_url": "https://machine.ecocitizenz.org/manifests/resolver.json",
  "recheck_before_reliance": true,
  "surface_id": "resolver",
  "display_name": "ECZ-ID Resolver",
  "subject_origin": "https://resolver.ecocitizenz.org",
  "canonical_manifest_url": "https://machine.ecocitizenz.org/manifests/resolver.json",
  "surface_role": "public_read_only_verification",
  "origin_discovery_path": "/.well-known/ecz-site.json",
  "documentation_url": "https://developers.ecocitizenz.com",
  "resolver_url": "https://resolver.ecocitizenz.org",
  "public_actions": [
    {
      "id": "resolve",
      "label": "Open Resolver public proof",
      "method": "GET",
      "url": "https://resolver.ecocitizenz.org"
    },
    {
      "id": "recheck",
      "label": "Re-check current public proof before reliance",
      "method": "GET",
      "url": "https://resolver.ecocitizenz.org"
    },
    {
      "id": "review_guidance",
      "label": "Review developer guidance",
      "method": "GET",
      "url": "https://developers.ecocitizenz.com"
    }
  ],
  "authority_boundary": {
    "backend_core": "Writes deterministic truth.",
    "trustops": "Handles acquisition, payment, setup and lifecycle.",
    "resolver": "Provides public read-only proof.",
    "developer_gateway": "Explains schemas and integrations.",
    "machine_interface": "Publishes public-safe metadata and routing only.",
    "websites": "Explain and route."
  },
  "do_not_infer": [
    "safety",
    "approval",
    "certification",
    "compliance",
    "entitlement",
    "eligibility",
    "binding",
    "current_identity_state"
  ],
  "control_surface_note": "Resolver is public read-only verification. It does not accept payment, perform setup or write truth."
}