ai.newnal.illi.family.credentialEnvelope

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "A parent's credentials (Newnal ID handle and password, scoped app passwords, parent 1's Private Phone key) sealed by the ILLI device to the root admin's custody public key (crypto_box_seal: ephemeral X25519 + HKDF + AES-256-GCM). Written by the device in the parent's repo; only the root admin can open it. Deleted by the device once a custodyReceipt is seen.",
      "key": "tid",
      "record": {
        "properties": {
          "ciphertext": {
            "maxLength": 16384,
            "type": "bytes"
          },
          "createdAt": {
            "format": "datetime",
            "type": "string"
          },
          "keyId": {
            "description": "member.custodyPublicKey.keyId used to seal.",
            "maxLength": 64,
            "type": "string"
          },
          "recipient": {
            "description": "The root admin whose custodyPublicKey sealed this envelope.",
            "format": "did",
            "type": "string"
          },
          "slot": {
            "maximum": 2,
            "minimum": 1,
            "type": "integer"
          }
        },
        "required": [
          "slot",
          "recipient",
          "keyId",
          "ciphertext",
          "createdAt"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "ai.newnal.illi.family.credentialEnvelope",
  "lexicon": 1
}