A parent's credentials (Newnal ID handle and password, scoped app passwords, parent 1's Private Phone key) sealed by the ILLI device to the root admin's custody public key (crypto_box_seal: ephemeral X25519 + HKDF + AES-256-GCM). Written by the device in the parent's repo; only the root admin can open it. Deleted by the device once a custodyReceipt is seen.
Record Key
tid
Timestamp-based ID
Properties
ciphertext
bytes
Required
No description available.
maxLength: 16384createdAt
string
datetime
Required
An RFC 3339 formatted timestamp.
keyId
string
Required
member.custodyPublicKey.keyId used to seal.
maxLength: 64 bytesrecipient
string
did
Required
The root admin whose custodyPublicKey sealed this envelope.
slot
integer
Required
No description available.
minimum: 1maximum: 2View raw schema
{
"description": "A parent's credentials (Newnal ID handle and password, scoped app passwords, parent 1's Private Phone key) sealed by the ILLI device to the root admin's custody public key (crypto_box_seal: ephemeral X25519 + HKDF + AES-256-GCM). Written by the device in the parent's repo; only the root admin can open it. Deleted by the device once a custodyReceipt is seen.",
"key": "tid",
"record": {
"properties": {
"ciphertext": {
"maxLength": 16384,
"type": "bytes"
},
"createdAt": {
"format": "datetime",
"type": "string"
},
"keyId": {
"description": "member.custodyPublicKey.keyId used to seal.",
"maxLength": 64,
"type": "string"
},
"recipient": {
"description": "The root admin whose custodyPublicKey sealed this envelope.",
"format": "did",
"type": "string"
},
"slot": {
"maximum": 2,
"minimum": 1,
"type": "integer"
}
},
"required": [
"slot",
"recipient",
"keyId",
"ciphertext",
"createdAt"
],
"type": "object"
},
"type": "record"
}