Lexicon Garden

ai.newnal.illi.family.custodyReceipt

Written by the root admin after opening a credentialEnvelope and storing its contents in their Private Sphere; tells the device it may delete the envelope.

Repository @illi-service.newnal.id did:plc:uztm7bi2ce42dez3uu3qafro not from the namespace authority
Details · record, key tid
Kindrecord
Record keytid
Authorityfamily.illi.newnal.ai
Indexed
Compare Edit in builder → Fork →

Record

record · key tid

Properties

createdAt

requiredstring · datetime

subject

requiredref
Reference

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • ai.newnal.illi.family.credentialEnvelope

    record not from the namespace authority

    A parent's credentials (Newnal ID handle and password, scoped app passwords, parent 1's Private Phone key) sealed by the ILLI device to the root admin's custody public key (crypto_box_seal: ephemeral X25519 + HKDF + AES-256-GCM). Written by the device in the parent's repo; only the root admin can open it. Deleted by the device once a custodyReceipt is seen.

  • ai.newnal.illi.private.custodyKey

    record not from the namespace authority

    The root admin's X25519 custody private key for one home (rkey = homeId), kept in their Private Sphere so logging out or reinstalling the app does not lose it; the app caches it in the Keystore/Keychain.

  • ai.newnal.illi.private.parentCredential

    record

    Custody record kept by a home's root admin in their own Private Sphere: the credentials of one of the home's parent accounts, generated on the ILLI device and handed over through the Service Agent Node at link time. rkey <homeId>-<slot>. Used to restore a parent account on a replaced device.