{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Associates a device key with a DID, enabling key→DID lookup for vouch graph traversal and service authorization.",
      "key": "any",
      "record": {
        "properties": {
          "challenge": {
            "description": "DID that this key is bound to.",
            "format": "did",
            "type": "string"
          },
          "createdAt": {
            "format": "datetime",
            "type": "string"
          },
          "keyId": {
            "description": "Identifier for the device key (e.g. soft-<uuid> or a did:key).",
            "type": "string"
          },
          "name": {
            "description": "Human-readable name or label for this key association (e.g. hostname).",
            "type": "string"
          },
          "service": {
            "description": "Service scope for this key association.",
            "type": "string"
          }
        },
        "required": [
          "keyId",
          "challenge",
          "createdAt"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "com.publicdomainrelay.temp.badgeBlueKeys",
  "lexicon": 1
}