# org.governedcrossing.temp.crossingRecord

> Published by [localboundary.bsky.social](https://lexicon.garden/identity/did:plc:4xoefmmbsulm4xns3kbb6mnk)

✓ This is the authoritative definition for this NSID.

## Links

- [View on Lexicon Garden](https://lexicon.garden/lexicon/did:plc:4xoefmmbsulm4xns3kbb6mnk/org.governedcrossing.temp.crossingRecord)
- [Documentation](https://lexicon.garden/lexicon/did:plc:4xoefmmbsulm4xns3kbb6mnk/org.governedcrossing.temp.crossingRecord/docs)
- [Examples](https://lexicon.garden/lexicon/did:plc:4xoefmmbsulm4xns3kbb6mnk/org.governedcrossing.temp.crossingRecord/examples)

## Definitions

### `org.governedcrossing.temp.crossingRecord`

**Type**: `record`

DRAFT in the temp namespace; may change without notice. A projection of a seam:CrossingRecord whose canonical copy lives on the emitting party's own substrate. Published publicly only when the crossing itself was public and, for a substrate crossing, only once it completed; records of blocked gate checks are never published. Private crossings publish at most an org.governedcrossing.temp.commitment. Crossing records are intentionally non-repudiable (every record carries the emitter's inline signature), a deliberate difference from permissioned-space deniability. They carry digests and references of what crossed, never the crossed content. Value lists are open; a record conforms only when it uses the registered values of the seam:CrossingRecord vocabulary. See CONFORMANCE.md.

**Key**: `tid`

| Property | Type | Required | Description |
|----------|------|----------|-------------|
| `boundType` | `string` | Yes | Exposure claim. Ordered by admissible claim strength: exposure-unbounded < exposure-upper-bound < confirmation < attestation. The value must match the architecture's actual enforcement; overclaiming is inadmissible. |
| `chainDepth` | `integer` | No | Required when chainReference is present. |
| `chainReference` | `ref` → `org.governedcrossing.temp.defs#recordRef` | No | Immediately upstream record, by recordId and link CID. Required on a crossing-completion, naming its crossing-intent. |
| `crossingCompletion` | `ref` → `org.governedcrossing.temp.defs#crossingCompletion` | No | Required when recordType is crossing-completion. |
| `crossingIntent` | `ref` → `org.governedcrossing.temp.defs#crossingIntent` | No | Required when recordType is crossing-intent. |
| `emittedAt` | `string` (datetime) | Yes | Author-declared. |
| `emittedBy` | `string` (did) | Yes | Emitting party; also the `$sig.repository` value for every signature on this record. |
| `evidenceDecay` | `string` | No | ISO 8601 date after which the record's claims require re-verification. |
| `governanceEvent` | `string` | Yes |  |
| `lineageAnchorType` | `string` | No | Required when chainReference is present. witness-signed and timestamp-signed are locked pending infrastructure; countersignatures do not unlock them. |
| `provenanceStatus` | `string` | Yes |  |
| `provenanceStatusBasis` | `string` | No | Required when provenanceStatus is not asserted. |
| `recordId` | `string` (uri) | Yes | Substrate-independent identifier of the canonical record; not the AT-URI of this projection. |
| `recordType` | `string` | Yes |  |
| `salt` | `bytes` | No | Random salt, at least 16 bytes, generated fresh for each record at emission. Every conformant record carries one (see CONFORMANCE.md), so that a predictable record, or a reference to it, cannot be confirmed by guessing. |
| `signatures` | `array` | No | Attestation Specification v1.0 signatures array. A conformant crossing record carries the emitter's inline signature (role emitter). On private crossings countersignatures are inline only; remote strongRef countersignatures only on public crossings. A strongRef to the emitter's own commitment is permitted. |
| `supersededBy` | `string` (uri) | No | Required when provenanceStatus is superseded. |

## Raw Schema

```json
{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "DRAFT in the temp namespace; may change without notice. A projection of a seam:CrossingRecord whose canonical copy lives on the emitting party's own substrate. Published publicly only when the crossing itself was public and, for a substrate crossing, only once it completed; records of blocked gate checks are never published. Private crossings publish at most an org.governedcrossing.temp.commitment. Crossing records are intentionally non-repudiable (every record carries the emitter's inline signature), a deliberate difference from permissioned-space deniability. They carry digests and references of what crossed, never the crossed content. Value lists are open; a record conforms only when it uses the registered values of the seam:CrossingRecord vocabulary. See CONFORMANCE.md.",
      "key": "tid",
      "record": {
        "properties": {
          "boundType": {
            "description": "Exposure claim. Ordered by admissible claim strength: exposure-unbounded < exposure-upper-bound < confirmation < attestation. The value must match the architecture's actual enforcement; overclaiming is inadmissible.",
            "knownValues": [
              "exposure-unbounded",
              "exposure-upper-bound",
              "confirmation",
              "attestation"
            ],
            "maxLength": 64,
            "type": "string"
          },
          "chainDepth": {
            "description": "Required when chainReference is present.",
            "minimum": 0,
            "type": "integer"
          },
          "chainReference": {
            "description": "Immediately upstream record, by recordId and link CID. Required on a crossing-completion, naming its crossing-intent.",
            "ref": "org.governedcrossing.temp.defs#recordRef",
            "type": "ref"
          },
          "crossingCompletion": {
            "description": "Required when recordType is crossing-completion.",
            "ref": "org.governedcrossing.temp.defs#crossingCompletion",
            "type": "ref"
          },
          "crossingIntent": {
            "description": "Required when recordType is crossing-intent.",
            "ref": "org.governedcrossing.temp.defs#crossingIntent",
            "type": "ref"
          },
          "emittedAt": {
            "description": "Author-declared.",
            "format": "datetime",
            "type": "string"
          },
          "emittedBy": {
            "description": "Emitting party; also the `$sig.repository` value for every signature on this record.",
            "format": "did",
            "type": "string"
          },
          "evidenceDecay": {
            "description": "ISO 8601 date after which the record's claims require re-verification.",
            "maxLength": 64,
            "type": "string"
          },
          "governanceEvent": {
            "knownValues": [
              "gate-check",
              "schema-change",
              "action-provenance",
              "code-change-verification",
              "term-amendment-proposal",
              "term-amendment-objection",
              "term-amendment-consent",
              "term-amendment-resolution",
              "standing-constitution",
              "standing-amendment",
              "delegation-grant",
              "substrate-crossing"
            ],
            "maxLength": 64,
            "type": "string"
          },
          "lineageAnchorType": {
            "description": "Required when chainReference is present. witness-signed and timestamp-signed are locked pending infrastructure; countersignatures do not unlock them.",
            "knownValues": [
              "author-declared",
              "witness-signed",
              "timestamp-signed"
            ],
            "maxLength": 32,
            "type": "string"
          },
          "provenanceStatus": {
            "knownValues": [
              "asserted",
              "confirmed",
              "contested",
              "superseded"
            ],
            "maxLength": 32,
            "type": "string"
          },
          "provenanceStatusBasis": {
            "description": "Required when provenanceStatus is not asserted.",
            "maxGraphemes": 300,
            "maxLength": 1000,
            "type": "string"
          },
          "recordId": {
            "description": "Substrate-independent identifier of the canonical record; not the AT-URI of this projection.",
            "format": "uri",
            "maxLength": 2048,
            "type": "string"
          },
          "recordType": {
            "knownValues": [
              "gate-check",
              "lineage",
              "provenance",
              "verification",
              "term-amendment",
              "objection",
              "consent",
              "resolution",
              "standing-registry-entry",
              "delegation",
              "crossing-intent",
              "crossing-completion"
            ],
            "maxLength": 64,
            "type": "string"
          },
          "salt": {
            "description": "Random salt, at least 16 bytes, generated fresh for each record at emission. Every conformant record carries one (see CONFORMANCE.md), so that a predictable record, or a reference to it, cannot be confirmed by guessing.",
            "maxLength": 64,
            "minLength": 16,
            "type": "bytes"
          },
          "signatures": {
            "description": "Attestation Specification v1.0 signatures array. A conformant crossing record carries the emitter's inline signature (role emitter). On private crossings countersignatures are inline only; remote strongRef countersignatures only on public crossings. A strongRef to the emitter's own commitment is permitted.",
            "items": {
              "refs": [
                "org.governedcrossing.temp.defs#signature",
                "com.atproto.repo.strongRef"
              ],
              "type": "union"
            },
            "maxLength": 16,
            "type": "array"
          },
          "supersededBy": {
            "description": "Required when provenanceStatus is superseded.",
            "format": "uri",
            "maxLength": 2048,
            "type": "string"
          }
        },
        "required": [
          "recordId",
          "recordType",
          "emittedAt",
          "emittedBy",
          "provenanceStatus",
          "governanceEvent",
          "boundType"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "org.governedcrossing.temp.crossingRecord",
  "lexicon": 1
}
```