ai.newnal.illi.account.requestPDNCreationGrant
{
"$type": "com.atproto.lexicon.schema",
"defs": {
"main": {
"description": "Issue a 60-second creation grant (a service-auth JWT for the PDN's ai.newnal.pdn.server.createAttestedAccount) to an attested ILLI client. In the PoC a device needs no attestation; in production the manufacturing-key or platform attestation is mandatory.",
"errors": [
{
"name": "InvalidAttestation"
},
{
"name": "DeviceRevoked"
},
{
"name": "RateLimitExceeded"
}
],
"input": {
"encoding": "application/json",
"schema": {
"properties": {
"attestation": {
"description": "Client attestation bound to a nonce from account.getAttestationNonce: device = Android key attestation rooted at Newnal's RKP CA; familyApp = Play Integrity / App Attest; PoC = mock:<client>:<secret>.",
"type": "string"
},
"client": {
"knownValues": [
"device",
"familyApp"
],
"type": "string"
},
"deviceId": {
"maxLength": 64,
"type": "string"
}
},
"required": [
"client"
],
"type": "object"
}
},
"output": {
"encoding": "application/json",
"schema": {
"properties": {
"expiresAt": {
"format": "datetime",
"type": "string"
},
"grant": {
"type": "string"
},
"pdnDid": {
"format": "did",
"type": "string"
},
"pdnUrl": {
"format": "uri",
"type": "string"
}
},
"required": [
"grant",
"pdnUrl",
"pdnDid",
"expiresAt"
],
"type": "object"
}
},
"type": "procedure"
}
},
"id": "ai.newnal.illi.account.requestPDNCreationGrant",
"lexicon": 1
}
Metadata
- DID
-
did:plc:uztm7bi2ce42dez3uu3qafro - CID
-
bafyreifuuetvzybn6vunfvepuuims4ue4dkejwargzkipqbsox6qsfthd4 - Indexed At
- 2026-10-23 07:24 UTC
- AT-URI
-
at://did:plc:uztm7bi2ce42dez3uu3qafro/com.atproto.lexicon.schema/ai.newnal.illi.account.requestPDNCreationGrant
Version History (2 versions)
- 2026-10-23 07:24 UTC (current)
- 2026-10-23 03:29 UTC diff
Similar Lexicons
Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
Issue a server nonce (5 minutes) that a client binds into its attestation before calling account.requestPDNCreationGrant, account.parent.signIn, account.family.signIn or device.requestOnboardingCode. The nonce is an att…
-
Create an account on behalf of a client attested by a trusted issuer. Authenticated with a service-auth JWT (iss = trusted issuer DID, aud = this PDN, lxm = this method, exp - iat <= 60 s, unique jti). No invite code, n…