ai.newnal.illi.account.requestPDNCreationGrant

illi-service.newnal.id

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Issue a 60-second creation grant (a service-auth JWT for the PDN's ai.newnal.pdn.server.createAttestedAccount) to an attested ILLI client. In the PoC a device needs no attestation; in production the manufacturing-key or platform attestation is mandatory (D-51, D-61).",
      "errors": [
        {
          "name": "InvalidAttestation"
        },
        {
          "name": "DeviceRevoked"
        },
        {
          "name": "RateLimitExceeded"
        }
      ],
      "input": {
        "encoding": "application/json",
        "schema": {
          "properties": {
            "attestation": {
              "description": "Client attestation bound to a nonce from account.getAttestationNonce (D-63): device = Android key attestation rooted at Newnal's RKP CA; familyApp = Play Integrity / App Attest; PoC = mock:<client>:<secret>.",
              "type": "string"
            },
            "client": {
              "knownValues": [
                "device",
                "familyApp"
              ],
              "type": "string"
            },
            "deviceId": {
              "maxLength": 64,
              "type": "string"
            }
          },
          "required": [
            "client"
          ],
          "type": "object"
        }
      },
      "output": {
        "encoding": "application/json",
        "schema": {
          "properties": {
            "expiresAt": {
              "format": "datetime",
              "type": "string"
            },
            "grant": {
              "type": "string"
            },
            "pdnDid": {
              "format": "did",
              "type": "string"
            },
            "pdnUrl": {
              "format": "uri",
              "type": "string"
            }
          },
          "required": [
            "grant",
            "pdnUrl",
            "pdnDid",
            "expiresAt"
          ],
          "type": "object"
        }
      },
      "type": "procedure"
    }
  },
  "id": "ai.newnal.illi.account.requestPDNCreationGrant",
  "lexicon": 1
}

Validate Record

Validate a record against ai.newnal.illi.account.requestPDNCreationGrant

Validation Options
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:uztm7bi2ce42dez3uu3qafro
CID
bafyreidacngzhv6op6a537bozzr33uvm7icugpmwvcvosm6xp2g2nhj4ii
Indexed At
2026-10-23 03:29 UTC
AT-URI
at://did:plc:uztm7bi2ce42dez3uu3qafro/com.atproto.lexicon.schema/ai.newnal.illi.account.requestPDNCreationGrant

Version History (2 versions)

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Issue a server nonce (5 minutes) that a client binds into its attestation before calling account.requestPDNCreationGrant, account.parent.signIn, account.family.signIn or device.requestOnboardingCode. The nonce is an att…

  • ai.newnal.pdn.server.createAttestedAccount procedurenot from the namespace authority

    Create an account on behalf of a client attested by a trusted issuer. Authenticated with a service-auth JWT (iss = trusted issuer DID, aud = this PDN, lxm = this method, exp - iat <= 60 s, unique jti). No invite code, n…

Lexicon Garden

@