# email.atmos.attestation

> Published by [comail.at](https://lexicon.garden/identity/did:plc:yu6rmwoemqfnmsdkljyvmuhg)

✓ This is the authoritative definition for this NSID.

## Links

- [View on Lexicon Garden](https://lexicon.garden/lexicon/did:plc:yu6rmwoemqfnmsdkljyvmuhg/email.atmos.attestation)
- [Documentation](https://lexicon.garden/lexicon/did:plc:yu6rmwoemqfnmsdkljyvmuhg/email.atmos.attestation/docs)
- [Examples](https://lexicon.garden/lexicon/did:plc:yu6rmwoemqfnmsdkljyvmuhg/email.atmos.attestation/examples)

## Definitions

### `email.atmos.attestation`

**Type**: `record`

A PDS operator's declaration of cooperative membership and mail domain control. The labeling service verifies DNS configuration (MX, SPF, DKIM, DMARC) independently and applies verification labels to the operator's DID. The record key is the attested domain.

**Key**: `any`

| Property | Type | Required | Description |
|----------|------|----------|-------------|
| `domain` | `string` | Yes | The mail domain this attestation covers. Must match the record key. Domain control is verified by the labeling service via DNS (matching the DID's handle or a TXT record pointing to the DID). |
| `createdAt` | `string` (datetime) | Yes |  |
| `relayMember` | `boolean` | No | Whether this operator wants to participate in the cooperative relay pool. Absent means no. |
| `dkimSelectors` | `array` | Yes | DKIM selectors configured for this domain. The labeling service looks up DNS TXT records at <selector>._domainkey.<domain> to verify key publication. |

## Raw Schema

```json
{
  "id": "email.atmos.attestation",
  "defs": {
    "main": {
      "key": "any",
      "type": "record",
      "record": {
        "type": "object",
        "required": [
          "domain",
          "dkimSelectors",
          "createdAt"
        ],
        "properties": {
          "domain": {
            "type": "string",
            "maxLength": 253,
            "minLength": 1,
            "description": "The mail domain this attestation covers. Must match the record key. Domain control is verified by the labeling service via DNS (matching the DID's handle or a TXT record pointing to the DID)."
          },
          "createdAt": {
            "type": "string",
            "format": "datetime"
          },
          "relayMember": {
            "type": "boolean",
            "description": "Whether this operator wants to participate in the cooperative relay pool. Absent means no."
          },
          "dkimSelectors": {
            "type": "array",
            "items": {
              "type": "string",
              "maxLength": 63,
              "minLength": 1,
              "description": "A DKIM selector name."
            },
            "maxLength": 10,
            "minLength": 1,
            "description": "DKIM selectors configured for this domain. The labeling service looks up DNS TXT records at <selector>._domainkey.<domain> to verify key publication."
          }
        }
      },
      "description": "A PDS operator's declaration of cooperative membership and mail domain control. The labeling service verifies DNS configuration (MX, SPF, DKIM, DMARC) independently and applies verification labels to the operator's DID. The record key is the attested domain."
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1
}
```