ai.newnal.illi.private.parentCredential

illi-service.newnal.id

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Custody record kept by a home's root admin in their own Private Sphere: the credentials of one of the home's parent accounts, generated on the ILLI device and handed over through the Service Node at link time. rkey <homeId>-<slot>. Used to restore a parent account on a replaced device.",
      "key": "any",
      "record": {
        "properties": {
          "createdAt": {
            "format": "datetime",
            "type": "string"
          },
          "handle": {
            "format": "handle",
            "type": "string"
          },
          "home": {
            "format": "tid",
            "type": "string"
          },
          "parentDid": {
            "format": "did",
            "type": "string"
          },
          "password": {
            "description": "The parent's Newnal ID password (production: device-generated; absent in the PoC, where a family member typed it on the PDN's page).",
            "maxLength": 256,
            "type": "string"
          },
          "phoneMxid": {
            "description": "Parent 1 only: the device's Private Phone Matrix ID.",
            "maxLength": 255,
            "type": "string"
          },
          "phonePrivateKey": {
            "description": "Parent 1 only: the device's Private Phone did:key private key.",
            "maxLength": 256,
            "type": "bytes"
          },
          "slot": {
            "maximum": 2,
            "minimum": 1,
            "type": "integer"
          },
          "updatedAt": {
            "format": "datetime",
            "type": "string"
          }
        },
        "required": [
          "home",
          "slot",
          "parentDid",
          "handle",
          "createdAt",
          "updatedAt"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "ai.newnal.illi.private.parentCredential",
  "lexicon": 1
}

Validate Record

Validate a record against ai.newnal.illi.private.parentCredential

Validation Options
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:uztm7bi2ce42dez3uu3qafro
CID
bafyreidmqqsxoz3y3litvwcb4pv3lbvxiupoiwrrqyoq54uwmqfchae6dq
Indexed At
2026-10-15 06:07 UTC
AT-URI
at://did:plc:uztm7bi2ce42dez3uu3qafro/com.atproto.lexicon.schema/ai.newnal.illi.private.parentCredential

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • ai.newnal.illi.family.credentialEnvelope recordnot from the namespace authority

    A parent's credentials (Newnal ID handle and password, scoped app passwords, parent 1's Private Phone key) sealed by the ILLI device to the root admin's custody public key (crypto_box_seal: ephemeral X25519 + HKDF + AES…

  • ai.newnal.illi.private.phoneKey recordnot from the namespace authority

    The author's own Private Phone account for one home, kept in the author's Private Sphere so a reinstalled app or a replaced device restores the same Matrix identity. rkey = homeId.

  • ai.newnal.illi.private.custodyKey recordnot from the namespace authority

    The root admin's X25519 custody private key for one home (rkey = homeId), kept in their Private Sphere so logging out or reinstalling the app does not lose it; the app caches it in the Keystore/Keychain.

  • ai.newnal.illi.family.phoneIdentity recordnot from the namespace authority

    The author's Private Phone account in this home, identified by its Matrix ID (the homeserver is part of the MXID). One per account per family sphere; on a device only parent 1 has one.

  • ai.newnal.illi.family.parentSlot recordnot from the namespace authority

    One of the two parent slots of a home. Written by an admin into the admin's own repo; the Service Node resolves one record per slot by the newest updatedAt.

Lexicon Garden

@