At this level
ai.newnal.illi.family ยท 9- ai.newnal.illi.family.artworkVersion record One finished version of a family work: the video the media service made, stored as a blob on the root admin's PDN and referenced from the family sphere (root admin repo, written by the Service Agent Node with the root admin's session). The record key is deterministic, "v1-" plus the first 32 hex characters of sha256 over homeId, artworkKey, mediaArtworkId and compositionVersion joined with newlines, so a retried write replaces the same record with the same content and other content under the sam
- ai.newnal.illi.family.credentialEnvelope record not from the namespace authority A parent's credentials (Newnal ID handle and password, scoped app passwords, parent 1's Private Phone key) sealed by the ILLI device to the root admin's custody public key (crypto_box_seal: ephemeral X25519 + HKDF + AES-256-GCM). Written by the device in the parent's repo; only the root admin can open it. Deleted by the device once a custodyReceipt is seen.
- ai.newnal.illi.family.custodyReceipt record not from the namespace authority Written by the root admin after opening a credentialEnvelope and storing its contents in their Private Sphere; tells the device it may delete the envelope.
- ai.newnal.illi.family.dataEntry record ILLI's provenance note for a My Data record written in a parent's name: who entered it, from which source, and why. Written by the acting admin into their own repo in the family sphere; the My Data record itself stays generic.
- ai.newnal.illi.family.mediaItem record One original photo or video in the home's content bank. The original and its sidecar are blobs on the author's PDN; the thumbnail, display rendition, poster, dimensions and capture time are produced by the media service and uploaded by the Service Agent Node to the same PDN after the item was created, so a freshly created item may carry only the original and its upload-time content hash for exact deduplication.
- ai.newnal.illi.family.member record Human-facing membership of one account in this home (rkey = the member DID), written by the root admin as a portable mirror of the Service Agent Node's role table.
- ai.newnal.illi.family.parentSlot record One of the two parent slots of a home. Written by an admin into the admin's own repo; the Service Agent Node resolves one record per slot by the newest updatedAt.
- ai.newnal.illi.family.phoneIdentity record The author's Private Phone account, identified by its Matrix ID (the server name is part of the MXID). One account per person: a family member's appears in every family sphere the member belongs to, and parent 1's is the account the ILLI device calls with (parent 2 has none). Written by the Service Agent Node after phone.registerIdentity.
- ai.newnal.illi.family.phoneRoom record Registry entry for a Private Phone room of this home, written by the ILLI Service Agent Node with the root admin's session after it created the room through the Messaging Node's Admin API: the home's group room or a direct room between a member and parent 1.