zone.stratos.actor.enrollment
A record indicating the user is enrolled in a Stratos service. Published to the user's PDS during OAuth enrollment for endpoint discovery by AppViews. Multiple enrollment records are supported — one per Stratos service.
Details · record, key any
| Kind | record |
|---|---|
| Record key | any |
| Authority | actor.stratos.zone |
| Indexed |
Record
record · key anyProperties
Service attestation vouching for the user's enrollment, boundaries, and signing key.
boundaries
arrayService-qualified boundaries the user has access to on this Stratos service, each in '{serviceDid}/{domainName}' format.
maxLength: 50
Timestamp when the enrollment was created.
The Stratos service endpoint URL where this user's private data is stored.
The user's P-256 public key as a did:key string, generated by the Stratos service for user-level record signing.
#serviceAttestation
objectAn attestation signed by the Stratos service key. The signed payload is DAG-CBOR encoded {boundaries, did, signingKey} with sorted keys.
Properties
Raw signature bytes of the DAG-CBOR encoded attestation payload, signed by the service key.
The Stratos service's public key as a did:key string, used to verify the attestation signature.
Similar lexicons
semantic matchLexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
Resolve enrollment boundaries for a DID. Returns the boundary domains the user is enrolled in.
-
Check enrollment status for a DID in this Stratos service.
-
agency.portable.attestation
recordAn attestation by a verifier that a subject atproto account is linked to an identity, community, or role in an external service. Paired with a matching agency.portable.membership record on the subject's PDS.