Normalize existing SBOM, package, lockfile, provenance and machine-identity evidence without replacing native scanners.
-
Updated
Nov 2, 2026
Normalize existing SBOM, package, lockfile, provenance and machine-identity evidence without replacing native scanners.
Compare normalized GitHub trust and currentness evidence with a reviewed baseline without retaining raw source.
Create deterministic machine-trust evidence packs for MSP QBR, vCISO, insurance and regulatory review workflows.
Review GitHub workflow dependencies, permissions and currentness evidence without uploading source.
Discover machine actors and machine-consumed surfaces in a customer repository and create a neutral MSP evidence inventory.
Review declared GitHub Agentic Workflow authority, tools and compile-pair evidence without executing the agent.
Review API identity and current-state declarations without becoming a generic API vulnerability scanner.
Practical examples for organisational machine identity, parent-child identity relationships and resolver-first evidence using ECZ-ID Business Passports.
Practical MCP readiness, security and stateless-migration resources for teams moving MCP servers toward enterprise deployment.
Official ECZ-ID MCP Trust product and documentation hub. Local-first MCP configuration and change inspection for VS Code.
Inventory AI-agent, MCP, plugin and workflow authority surfaces for MSP-managed customer estates using neutral evidence.
Compare current machine-trust evidence with an MSP-approved baseline without making a universal trust or compliance verdict.
Run a bounded public website-security observation from CI and return one evidence-based next step.
Free AI agent authority, permissions and reachability resources for understanding what agents can access before they act.
Route machine subjects through the free Business Passport Parent gateway and one of seven free child Passport families.
GENERATED distribution repo — ECZ-ID Machine Trust as one Gemini CLI extension (six free, MIT-licensed skills). Canonical source: Ecocitizenz/eczid-agent-plugins. Do not hand edit.
Review declared digital-counterparty identity and evidence currentness without an automatic vendor-risk verdict.
Connect release identity with GitHub-native provenance evidence without replacing GitHub attestations.
Official ECZ-ID Agent Trust product and documentation hub. Local-first agent inventory, authority and change inspection for VS Code.
Practical digital-counterparty review resources for identity, websites, portals, APIs, supplier evidence, procurement and re-checkable current state.
To associate your repository with the ecz-id topic, visit your repo's landing page and select "manage topics."