ai.newnal.illi.private.parentCredential

Custody record kept by a home's root admin in their own Private Sphere: the credentials of one of the home's parent accounts, generated on the ILLI device and handed over through the Service Agent Node at link time. rkey <homeId>-<slot>. Used to restore a parent account on a replaced device.

Details · record, key any
Kindrecord
Record keyany
Authorityprivate.illi.newnal.ai
Indexed

Record

record · key any

Properties

createdAt

requiredstring · datetime

handle

requiredstring · handle

home

requiredstring · tid

parentDid

requiredstring · did

password

string

The parent's Newnal ID password (production: device-generated; absent in the PoC, where a family member typed it on the PDN's page).

  • maxLength: 256

phoneMxid

string

Parent 1 only: the device's Private Phone Matrix ID.

  • maxLength: 255

Parent 1 only: the device's Private Phone did:key private key.

  • maxLength: 256

slot

requiredinteger
  • minimum: 1
  • maximum: 2

updatedAt

requiredstring · datetime

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • ai.newnal.illi.family.credentialEnvelope

    record not from the namespace authority

    A parent's credentials (Newnal ID handle and password, scoped app passwords, parent 1's Private Phone key) sealed by the ILLI device to the root admin's custody public key (crypto_box_seal: ephemeral X25519 + HKDF + AES-256-GCM). Written by the device in the parent's repo; only the root admin can open it. Deleted by the device once a custodyReceipt is seen.

  • The author's own Private Phone account, kept in the author's Private Sphere so a reinstalled app, a reset device or a replaced device restores the same Matrix identity. One per person: rkey self (earlier records used rkey = homeId and carry home).

  • ai.newnal.illi.private.custodyKey

    record not from the namespace authority

    The root admin's X25519 custody private key for one home (rkey = homeId), kept in their Private Sphere so logging out or reinstalling the app does not lose it; the app caches it in the Keystore/Keychain.

  • The author's Private Phone account, identified by its Matrix ID (the server name is part of the MXID). One account per person: a family member's appears in every family sphere the member belongs to, and parent 1's is the account the ILLI device calls with (parent 2 has none). Written by the Service Agent Node after phone.registerIdentity.

  • One of the two parent slots of a home. Written by an admin into the admin's own repo; the Service Agent Node resolves one record per slot by the newest updatedAt.