ECZ-ID Cloud Trust

Review cloud and infrastructure-as-code surfaces and their proof posture.

Free, local-first. No source upload. No sign-in to run a check.

• Surfaces terraform / iac and related evidence — locally, by filename and path.
• Builds a local, claim-free evidence summary you can review and share.
• Routes to Resolver lookup, implementation guidance and supported setup.

Who this is for

Platform & DevOps teams reviewing cloud and infrastructure-as-code trust posture.

What you can do in under a minute

1. Open or scan the workspace — run ECZ-ID Cloud Trust: Review / Scan Workspace.
2. Review the evidence — observed and not-observed, in plain English.
3. Open implementation guidance or continue supported setup where relevant.

What it looks for

• Terraform / IaC
• Kubernetes / Helm
• Cloud provider templates
• Cloud identity / trust policy

Example use cases

• Reviewing Terraform / Kubernetes before a deployment.
• Confirming cloud identity / trust-policy references exist.

What results mean

Results describe observed evidence and public-proof posture — never a safety, approval, certification or compliance verdict:

evidence observed · evidence not observed · review required · no public proof reference found yet · re-check before reliance · your local policy decides.

There is no “pass/fail”. Local policy decides what is sufficient, and you should re-check before reliance.

Recommended next steps

• Show evidence — observed and not-observed, no verdict.
• Build evidence summary — a local, claim-free document you can review and save explicitly.
• Open implementation guidance — Developer Gateway.
• Open Resolver — read-only public proof lookup.
• Request Resolver Proof — for a third-party target (claim-free request).
• Begin supported setup — hand off to TrustOps (metadata only).
• Re-check later — re-run before you rely on a result.

Privacy & permissions

See the bundled PRIVACY.md for the full notice.

Frequently asked questions

Is this extension free?

Yes. Every local check is free — you never need to sign in or pay to run one.

Does it upload my source code?

No. Detection is filename/path only; no source, prompts, secrets or tool payloads ever leave your device, and there is no telemetry.

Does a missing item mean something is wrong?

No. “Evidence not observed” is neutral — your local policy decides what is sufficient.

What does it do when the public interface service is unavailable?

It keeps working from a bundled, verified fallback contract. A refresh is optional and user-initiated.

What it does not do

• No source / prompt / secret upload, and no telemetry.
• Writes no canonical truth, decides no BOUND state, creates no entitlement.
• Makes no safety, approval, certification or compliance claim.
• Runs no checkout or payment — commercial actions happen only in TrustOps.

Install & first use

1. Install ECZ-ID Cloud Trust from the Visual Studio Marketplace (publisher EcoCitizenz).
2. Open a project and trust the workspace.
3. Run ECZ-ID Cloud Trust: Review / Scan Workspace and review the evidence.

Links & support

• Resolver (read-only proof): https://resolver.ecocitizenz.org
• TrustOps (supported setup): https://trustops.ecocitizenz.com/start
• Developer Gateway (docs & support): https://developers.ecocitizenz.com
• Privacy: see the bundled PRIVACY.md file

ECZ-ID is an independent project and is not affiliated with or sponsored by Microsoft, GitHub, VS Code, OpenAI, Anthropic, Google, or AWS. ECZ-ID helps make identity, authority, and resolver posture easier to review. Local policy decides whether this is sufficient.