Lexicon Garden

ai.newnal.illi.private.custodyKey

The root admin's X25519 custody private key for one home (rkey = homeId), kept in their Private Sphere so logging out or reinstalling the app does not lose it; the app caches it in the Keystore/Keychain.

Repository @illi-service.newnal.id did:plc:uztm7bi2ce42dez3uu3qafro not from the namespace authority
Details · record, key any
Kindrecord
Record keyany
Authorityprivate.illi.newnal.ai
Indexed
Compare Edit in builder → Fork →

Record

record · key any

Properties

createdAt

requiredstring · datetime

home

requiredstring · tid

keyId

requiredstring
  • maxLength: 64

privateKey

requiredbytes
  • maxLength: 64

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • ai.newnal.illi.private.phoneKey

    record

    The author's own Private Phone account, kept in the author's Private Sphere so a reinstalled app, a reset device or a replaced device restores the same Matrix identity. One per person: rkey self (earlier records used rkey = homeId and carry home).

  • ai.newnal.illi.private.parentCredential

    record

    Custody record kept by a home's root admin in their own Private Sphere: the credentials of one of the home's parent accounts, generated on the ILLI device and handed over through the Service Agent Node at link time. rkey <homeId>-<slot>. Used to restore a parent account on a replaced device.

  • ai.newnal.illi.family.credentialEnvelope

    record not from the namespace authority

    A parent's credentials (Newnal ID handle and password, scoped app passwords, parent 1's Private Phone key) sealed by the ILLI device to the root admin's custody public key (crypto_box_seal: ephemeral X25519 + HKDF + AES-256-GCM). Written by the device in the parent's repo; only the root admin can open it. Deleted by the device once a custodyReceipt is seen.

  • ink.resenha.ebookKey

    record

    Which key encrypts the account's ink.resenha.privateEbook files. The key itself stays on the reader's devices; this record only names it, and keeps a copy locked with a recovery key when the reader saved one.

  • ai.newnal.illi.home.setCustodyKey

    procedure

    Publish the root admin's X25519 custody public key on their member record; the private key stays in the root admin's Private Sphere.