Lexicon Garden

app.matakite.audit

An append-only attestation that a policy-selected auditor observed an app.matakite.* record create, update, or delete, or intentionally voided an unrepresentable event. The auditor repository establishes observation chronology for clients that trust its DID; source-record createdAt and Jetstream time_us remain provenance rather than trusted time.

Repository @matakite.app did:plc:vhycfha6sjn44hxepb5bmjax namespace authority
Details · record, key any
Kindrecord
Record keyany
Authoritymatakite.app
Indexed
Compare Edit in builder → Fork →

Record

record · key any

Properties

epoch

requiredstring · record-key

Auditor-defined chronology epoch. Reference validators prohibit colon because it separates epoch from sequence in the record key. Sequence values are unique and monotonic within one auditor DID and epoch.

  • maxLength: 64

observedAt

requiredstring · datetime

UTC time at which the auditor's durable intake first accepted the source event. Trusted scoring uses this time, not publication time.

operation

requiredstring

Audit lifecycle entry. Create/update/delete mirror the source operation; void intentionally consumes an unrepresentable sequence. Reference validators reject unknown values until their lifecycle semantics are specified.

  • knownValues: create | update | delete | void

previousCid

string · cid

CID previously observed at subjectUri when known. Meaningful only for update.

record

unknown

Exact public app.matakite.* source-record snapshot for create/update, including its $type. Omitted for delete/void. Reference validators require the $type to match the subject URI collection and its canonical DAG-CBOR CID to equal subjectCid. Unknown is used because common Lexicon validators do not currently validate record definitions nested through unions.

sequence

requiredinteger

Auditor-issued total order within the epoch. This breaks observedAt ties and is the authoritative lifecycle order.

  • minimum: 1

source

requiredstring

Observation transport. Provenance only; clients select trust by auditor DID and policy.

  • maxLength: 640
  • maxGraphemes: 64
  • knownValues: jetstream-legacy

sourceOperation

string

Original repository operation. Required only when operation is void.

  • knownValues: create | update | delete

sourceRev

requiredstring · tid

Source repository revision reported by the observation transport. It is repository-scoped provenance, not a global ordering key.

sourceTimeUs

requiredinteger

Source event time_us in Unix microseconds. Retained for provenance and replay analysis; not used as trusted scoring chronology.

  • minimum: 0

subjectCid

string · cid

CID observed for a create or update. Reference validators require the canonical DAG-CBOR CID of a create/update record snapshot to equal this value. For a delete or void, the last CID observed for the URI when known.

subjectUri

requiredstring · at-uri

URI of the app.matakite.* source record observed by the auditor.

voidNote

string

Optional public explanation for an operator-authorized void. Must not contain private source material.

  • maxLength: 3000
  • maxGraphemes: 300

voidReason

string

Terminal exclusion reason. Required only for an explicitly operator-authorized void.

  • maxLength: 640
  • maxGraphemes: 64
  • knownValues: invalidSourceRecord | unsupportedSourceRecord | recordTooLarge | unrecoverable