ai.newnal.illi.private.custodyKey

illi-service.newnal.id 

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "The root admin's X25519 custody private key for one home (rkey = homeId), kept in their Private Sphere so logging out or reinstalling the app does not lose it; the app caches it in the Keystore/Keychain.",
      "key": "any",
      "record": {
        "properties": {
          "createdAt": {
            "format": "datetime",
            "type": "string"
          },
          "home": {
            "format": "tid",
            "type": "string"
          },
          "keyId": {
            "maxLength": 64,
            "type": "string"
          },
          "privateKey": {
            "maxLength": 64,
            "type": "bytes"
          }
        },
        "required": [
          "home",
          "keyId",
          "privateKey",
          "createdAt"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "ai.newnal.illi.private.custodyKey",
  "lexicon": 1
}

Validate Record

Validate a record against ai.newnal.illi.private.custodyKey

Validation Options
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:uztm7bi2ce42dez3uu3qafro
CID
bafyreiej2g2fuvqcuucwsabvjlrychzucv3k2wji5isuarrdpf5zgsdtg4
Indexed At
2026-10-16 12:35 UTC
AT-URI
at://did:plc:uztm7bi2ce42dez3uu3qafro/com.atproto.lexicon.schema/ai.newnal.illi.private.custodyKey

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • ai.newnal.illi.private.phoneKey recordnot from the namespace authority

    The author's own Private Phone account for one home, kept in the author's Private Sphere so a reinstalled app or a replaced device restores the same Matrix identity. rkey = homeId.

  • ai.newnal.illi.private.parentCredential recordnot from the namespace authority

    Custody record kept by a home's root admin in their own Private Sphere: the credentials of one of the home's parent accounts, generated on the ILLI device and handed over through the Service Node at link time. rkey <hom…

  • ai.newnal.illi.family.credentialEnvelope recordnot from the namespace authority

    A parent's credentials (Newnal ID handle and password, scoped app passwords, parent 1's Private Phone key) sealed by the ILLI device to the root admin's custody public key (crypto_box_seal: ephemeral X25519 + HKDF + AES…

  • ai.newnal.illi.family.custodyReceipt recordnot from the namespace authority

    Written by the root admin after opening a credentialEnvelope and storing its contents in their Private Sphere; tells the device it may delete the envelope.

Lexicon Garden

@