{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "SSH public key registration record for fedproxy tunnel authentication. Associates an SSH public key with a fedproxy service name so the tunnel can verify connecting clients.",
      "key": "tid",
      "record": {
        "properties": {
          "createdAt": {
            "format": "datetime",
            "type": "string"
          },
          "publicKey": {
            "description": "SSH public key in OpenSSH authorized_keys format (e.g. ssh-ed25519 AAAA...).",
            "type": "string"
          },
          "service": {
            "description": "Fedproxy service name this SSH key is registered for (e.g. attest, compute). Must match a service configured on the fedproxy host.",
            "type": "string"
          }
        },
        "required": [
          "service",
          "publicKey",
          "createdAt"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "com.fedproxy.sshPublicKey",
  "lexicon": 1
}