Associates a device key with a DID, enabling key→DID lookup for vouch graph traversal and service authorization.
Record Key
any
Any valid record key
Properties
challenge
string
did
Required
DID that this key is bound to.
createdAt
string
datetime
Required
An RFC 3339 formatted timestamp.
keyId
string
Required
Identifier for the device key (e.g. soft-<uuid> or a did:key).
name
string
Optional
Human-readable name or label for this key association (e.g. hostname).
service
string
Optional
Service scope for this key association.
View raw schema
{
"key": "any",
"type": "record",
"record": {
"type": "object",
"required": [
"keyId",
"challenge",
"createdAt"
],
"properties": {
"name": {
"type": "string",
"description": "Human-readable name or label for this key association (e.g. hostname)."
},
"keyId": {
"type": "string",
"description": "Identifier for the device key (e.g. soft-<uuid> or a did:key)."
},
"service": {
"type": "string",
"description": "Service scope for this key association."
},
"challenge": {
"type": "string",
"format": "did",
"description": "DID that this key is bound to."
},
"createdAt": {
"type": "string",
"format": "datetime"
}
}
},
"description": "Associates a device key with a DID, enabling key→DID lookup for vouch graph traversal and service authorization."
}