Lexicon Garden

us.off-the-clock.subspace.policy

Space policy for a tree of spaces under one authority. A root omits parent and admits members directly; a space with a parent admits only members of its parent.

Repository @off-the-clock.us did:plc:tevv7zpavtjtsvqrrwwipobt not from the namespace authority
Details · object
Kindobject
Authoritysubspace.off-the-clock.us
Indexed
Compare Edit in builder → Fork →

Object

object

Properties

allowedApps

array

If set, the authority mints a credential only for these apps, evaluated against the attested client_id. When omitted, a space with a parent uses its parent's effective list, and a root admits any app.

itemsstring

An OAuth client ID.

parent

string · space-ref

The parent space, governed by this same policy and sharing this space's authority. Omitted on a root.

parentAccess

string

The access every parent member has in this space without a member entry: read, read and write, or none. Takes effect when parent is set.

  • default: "read"
  • knownValues: read | write | none

publicRead

boolean

If true, the authority issues a space credential to anyone, with or without a delegation token.

  • default: false

publishMembers

string

A space under this space's authority, written as '<spaceType>/<skey>', where the host publishes this space's member entries in us.off-the-clock.subspace.member records in the authority's repo. Omitted when the member list is not published.

publishPolicy

boolean

Publish the policy to readers as a com.atproto.space.policy record in the authority's repo in the space.

  • default: false

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • us.off-the-clock.subspace.member

    record not from the namespace authority

    The published member entries of one account, keyed by the member's DID, across every subspace that publishes its members to the space holding this record. Written by the authority's host to the authority's own repo. Authoritative only in the authority's repo.

  • fyi.opensocial.access

    record

    Who can access this space, in every space under the group. Grants apply only to this space. Members whose roles grant read may obtain space credentials and write their own records here. The group authority issues space credentials according to this record and nothing else.

  • family.pardy.familytime.approvals

    space not from the namespace authority

    A family's approvals space: same authority and space key as its family space. Every member can read; only parents are writers, so the space host admits decisions only from parents and every decision in its writer set is trusted.

  • rsvp.atmo.space.defs

    Shared types for permissioned-space XRPC methods.