ai.newnal.illi.private.parentCredential
Custody record kept by a home's root admin in their own Private Sphere: the credentials of one of the home's parent accounts, generated on the ILLI device and handed over through the Service Agent Node at link time. rkey <homeId>-<slot>. Used to restore a parent account on a replaced device.
Details · record, key any
| Kind | record |
|---|---|
| Record key | any |
| Authority | private.illi.newnal.ai |
| Indexed |
Record
record · key anyProperties
password
stringThe parent's Newnal ID password (production: device-generated; absent in the PoC, where a family member typed it on the PDN's page).
maxLength: 256
phoneMxid
stringParent 1 only: the device's Private Phone Matrix ID.
maxLength: 255
phonePrivateKey
bytesParent 1 only: the device's Private Phone did:key private key.
maxLength: 256
minimum: 1maximum: 2
Similar lexicons
semantic matchLexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
A parent's credentials (Newnal ID handle and password, scoped app passwords, parent 1's Private Phone key) sealed by the ILLI device to the root admin's custody public key (crypto_box_seal: ephemeral X25519 + HKDF + AES-256-GCM). Written by the device in the parent's repo; only the root admin can open it. Deleted by the device once a custodyReceipt is seen.
-
The author's own Private Phone account, kept in the author's Private Sphere so a reinstalled app, a reset device or a replaced device restores the same Matrix identity. One per person: rkey self (earlier records used rkey = homeId and carry home).
-
The root admin's X25519 custody private key for one home (rkey = homeId), kept in their Private Sphere so logging out or reinstalling the app does not lose it; the app caches it in the Keystore/Keychain.
-
The author's Private Phone account, identified by its Matrix ID (the server name is part of the MXID). One account per person: a family member's appears in every family sphere the member belongs to, and parent 1's is the account the ILLI device calls with (parent 2 has none). Written by the Service Agent Node after phone.registerIdentity.
-
One of the two parent slots of a home. Written by an admin into the admin's own repo; the Service Agent Node resolves one record per slot by the newest updatedAt.