# tech.lenooby09.didgit.signatureProof

> Published by [lenooby09.tech](https://lexicon.garden/identity/did:plc:xocoka6dmx74ciqskczoh6ci)

✓ This is the authoritative definition for this NSID.

## Links

- [View on Lexicon Garden](https://lexicon.garden/lexicon/did:plc:xocoka6dmx74ciqskczoh6ci/tech.lenooby09.didgit.signatureProof)
- [Documentation](https://lexicon.garden/lexicon/did:plc:xocoka6dmx74ciqskczoh6ci/tech.lenooby09.didgit.signatureProof/docs)
- [Examples](https://lexicon.garden/lexicon/did:plc:xocoka6dmx74ciqskczoh6ci/tech.lenooby09.didgit.signatureProof/examples)

## Definitions

### `tech.lenooby09.didgit.signatureProof`

**Type**: `record`

A cryptographic proof that a did-git object was signed by a specific DID. This provides key-rotation-independent verification by anchoring the proof to a PDS or signing event.

**Key**: `any`

| Property | Type | Required | Description |
|----------|------|----------|-------------|
| `signer` | `string` | Yes | The DID of the signer. |
| `objectId` | `string` | Yes | The hex SHA-256 object ID being proven. |
| `signedAt` | `integer` | Yes | Unix timestamp (seconds) when the proof was created. |
| `signature` | `string` | Yes | The base64url-encoded signature or JWT token. |
| `objectType` | `string` | Yes | The type of object. |
| `pdsEndpoint` | `string` | No | The PDS endpoint that issued this proof (for service auth proofs). |
| `signatureType` | `string` | Yes | The signature algorithm or token type (e.g., 'atproto-service-auth', 'jws', 'raw-ed25519', 'raw-ecdsa-secp256k1'). |

## Raw Schema

```json
{
  "id": "tech.lenooby09.didgit.signatureProof",
  "defs": {
    "main": {
      "key": "any",
      "type": "record",
      "record": {
        "type": "object",
        "required": [
          "objectId",
          "objectType",
          "signatureType",
          "signature",
          "signedAt",
          "signer"
        ],
        "properties": {
          "signer": {
            "type": "string",
            "maxLength": 128,
            "description": "The DID of the signer."
          },
          "objectId": {
            "type": "string",
            "maxLength": 64,
            "description": "The hex SHA-256 object ID being proven."
          },
          "signedAt": {
            "type": "integer",
            "description": "Unix timestamp (seconds) when the proof was created."
          },
          "signature": {
            "type": "string",
            "maxLength": 2048,
            "description": "The base64url-encoded signature or JWT token."
          },
          "objectType": {
            "type": "string",
            "maxLength": 16,
            "description": "The type of object.",
            "knownValues": [
              "blob",
              "tree",
              "commit",
              "tag"
            ]
          },
          "pdsEndpoint": {
            "type": "string",
            "maxLength": 256,
            "description": "The PDS endpoint that issued this proof (for service auth proofs)."
          },
          "signatureType": {
            "type": "string",
            "maxLength": 64,
            "description": "The signature algorithm or token type (e.g., 'atproto-service-auth', 'jws', 'raw-ed25519', 'raw-ecdsa-secp256k1')."
          }
        }
      },
      "description": "A cryptographic proof that a did-git object was signed by a specific DID. This provides key-rotation-independent verification by anchoring the proof to a PDS or signing event."
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1
}
```