org.governedcrossing.temp.crossingRecord

{
  "description": "DRAFT in the temp namespace; may change without notice. A projection of a seam:CrossingRecord whose canonical copy lives on the emitting party's own substrate. Published publicly only when the crossing itself was public and, for a substrate crossing, only once it completed; records of blocked gate checks are never published. Private crossings publish at most an org.governedcrossing.temp.commitment. Crossing records are intentionally non-repudiable (every record carries the emitter's inline signature), a deliberate difference from permissioned-space deniability. They carry digests and references of what crossed, never the crossed content. Value lists are open; a record conforms only when it uses the registered values of the seam:CrossingRecord vocabulary. See CONFORMANCE.md.",
  "key": "tid",
  "record": {
    "properties": {
      "boundType": {
        "description": "Exposure claim. Ordered by admissible claim strength: exposure-unbounded < exposure-upper-bound < confirmation < attestation. The value must match the architecture's actual enforcement; overclaiming is inadmissible.",
        "knownValues": [
          "exposure-unbounded",
          "exposure-upper-bound",
          "confirmation",
          "attestation"
        ],
        "maxLength": 64,
        "type": "string"
      },
      "chainDepth": {
        "description": "Required when chainReference is present.",
        "minimum": 0,
        "type": "integer"
      },
      "chainReference": {
        "description": "Immediately upstream record, by recordId and link CID. Required on a crossing-completion, naming its crossing-intent.",
        "ref": "org.governedcrossing.temp.defs#recordRef",
        "type": "ref"
      },
      "crossingCompletion": {
        "description": "Required when recordType is crossing-completion.",
        "ref": "org.governedcrossing.temp.defs#crossingCompletion",
        "type": "ref"
      },
      "crossingIntent": {
        "description": "Required when recordType is crossing-intent.",
        "ref": "org.governedcrossing.temp.defs#crossingIntent",
        "type": "ref"
      },
      "emittedAt": {
        "description": "Author-declared.",
        "format": "datetime",
        "type": "string"
      },
      "emittedBy": {
        "description": "Emitting party; also the `$sig.repository` value for every signature on this record.",
        "format": "did",
        "type": "string"
      },
      "evidenceDecay": {
        "description": "ISO 8601 date after which the record's claims require re-verification.",
        "maxLength": 64,
        "type": "string"
      },
      "governanceEvent": {
        "knownValues": [
          "gate-check",
          "schema-change",
          "action-provenance",
          "code-change-verification",
          "term-amendment-proposal",
          "term-amendment-objection",
          "term-amendment-consent",
          "term-amendment-resolution",
          "standing-constitution",
          "standing-amendment",
          "delegation-grant",
          "substrate-crossing"
        ],
        "maxLength": 64,
        "type": "string"
      },
      "lineageAnchorType": {
        "description": "Required when chainReference is present. witness-signed and timestamp-signed are locked pending infrastructure; countersignatures do not unlock them.",
        "knownValues": [
          "author-declared",
          "witness-signed",
          "timestamp-signed"
        ],
        "maxLength": 32,
        "type": "string"
      },
      "provenanceStatus": {
        "knownValues": [
          "asserted",
          "confirmed",
          "contested",
          "superseded"
        ],
        "maxLength": 32,
        "type": "string"
      },
      "provenanceStatusBasis": {
        "description": "Required when provenanceStatus is not asserted.",
        "maxGraphemes": 300,
        "maxLength": 1000,
        "type": "string"
      },
      "recordId": {
        "description": "Substrate-independent identifier of the canonical record; not the AT-URI of this projection.",
        "format": "uri",
        "maxLength": 2048,
        "type": "string"
      },
      "recordType": {
        "knownValues": [
          "gate-check",
          "lineage",
          "provenance",
          "verification",
          "term-amendment",
          "objection",
          "consent",
          "resolution",
          "standing-registry-entry",
          "delegation",
          "crossing-intent",
          "crossing-completion"
        ],
        "maxLength": 64,
        "type": "string"
      },
      "salt": {
        "description": "Random salt, at least 16 bytes, generated fresh for each record at emission. Every conformant record carries one (see CONFORMANCE.md), so that a predictable record, or a reference to it, cannot be confirmed by guessing.",
        "maxLength": 64,
        "minLength": 16,
        "type": "bytes"
      },
      "signatures": {
        "description": "Attestation Specification v1.0 signatures array. A conformant crossing record carries the emitter's inline signature (role emitter). On private crossings countersignatures are inline only; remote strongRef countersignatures only on public crossings. A strongRef to the emitter's own commitment is permitted.",
        "items": {
          "refs": [
            "org.governedcrossing.temp.defs#signature",
            "com.atproto.repo.strongRef"
          ],
          "type": "union"
        },
        "maxLength": 16,
        "type": "array"
      },
      "supersededBy": {
        "description": "Required when provenanceStatus is superseded.",
        "format": "uri",
        "maxLength": 2048,
        "type": "string"
      }
    },
    "required": [
      "recordId",
      "recordType",
      "emittedAt",
      "emittedBy",
      "provenanceStatus",
      "governanceEvent",
      "boundType"
    ],
    "type": "object"
  },
  "type": "record"
}