io.zzstoatzz.phi.override

{
  "id": "io.zzstoatzz.phi.override",
  "defs": {
    "main": {
      "key": "literal:self",
      "type": "record",
      "record": {
        "type": "object",
        "required": [
          "active",
          "message"
        ],
        "properties": {
          "active": {
            "type": "boolean",
            "description": "Whether the override (safe mode) is currently engaged."
          },
          "message": {
            "type": "string",
            "maxLength": 3000,
            "description": "The operator's own words: why the override is on and how phi should reach them. Shown to phi verbatim."
          },
          "updatedAt": {
            "type": "string",
            "format": "datetime",
            "description": "When the override was last changed."
          }
        }
      },
      "description": "Singleton operator-override record. Lives on the OPERATOR's repo, not phi's — the bot reads it from the DID configured as owner_did, so repo ownership is the authorization: anyone can write this record to their own repo, but only the operator's copy has effect. While active, phi's outward-facing tools (post/like/repost) refuse with the operator's message, and the message renders as a banner in phi's system prompt and on the cockpit."
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1
}