{
"$type": "com.atproto.lexicon.schema",
"defs": {
"main": {
"description": "Singleton operator-override record. Lives on the OPERATOR's repo, not phi's — the bot reads it from the DID configured as owner_did, so repo ownership is the authorization: anyone can write this record to their own repo, but only the operator's copy has effect. While active, phi's outward-facing tools (post/like/repost) refuse with the operator's message, and the message renders as a banner in phi's system prompt and on the cockpit.",
"key": "literal:self",
"record": {
"properties": {
"active": {
"description": "Whether the override (safe mode) is currently engaged.",
"type": "boolean"
},
"message": {
"description": "The operator's own words: why the override is on and how phi should reach them. Shown to phi verbatim.",
"maxLength": 3000,
"type": "string"
},
"updatedAt": {
"description": "When the override was last changed.",
"format": "datetime",
"type": "string"
}
},
"required": [
"active",
"message"
],
"type": "object"
},
"type": "record"
}
},
"id": "io.zzstoatzz.phi.override",
"lexicon": 1
}