ai.newnal.trustsquare.verification

bezalel-newnal.bsky.social

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "attestation": {
      "description": "Verifier signature over the canonical attestation payload.",
      "properties": {
        "format": {
          "knownValues": [
            "jws-compact"
          ],
          "type": "string"
        },
        "kid": {
          "description": "Key id in the issuer DID document.",
          "maxLength": 128,
          "type": "string"
        },
        "value": {
          "description": "Compact JWS over the canonical attestation payload (see 04-identity-verification.md).",
          "maxLength": 8192,
          "type": "string"
        }
      },
      "required": [
        "format",
        "kid",
        "value"
      ],
      "type": "object"
    },
    "main": {
      "description": "Public, PII-free proof that this account passed identity verification with the Newnal verifier. The attestation is a compact JWS signed by the issuer; the AppView rejects records whose signature or payload does not match.",
      "key": "literal:self",
      "record": {
        "properties": {
          "attestation": {
            "ref": "#attestation",
            "type": "ref"
          },
          "disclosure": {
            "ref": "ai.newnal.trustsquare.defs#disclosure",
            "type": "ref"
          },
          "expiresAt": {
            "format": "datetime",
            "type": "string"
          },
          "issuer": {
            "description": "did:web:trustsquare.newnal.ai",
            "format": "did",
            "type": "string"
          },
          "provider": {
            "knownValues": [
              "naver",
              "kakao",
              "toss",
              "pass",
              "mock-sms"
            ],
            "type": "string"
          },
          "subject": {
            "description": "Must equal the repository DID.",
            "format": "did",
            "type": "string"
          },
          "verificationId": {
            "description": "Opaque id used for status/revocation lookups.",
            "maxLength": 64,
            "type": "string"
          },
          "verifiedAt": {
            "format": "datetime",
            "type": "string"
          }
        },
        "required": [
          "issuer",
          "subject",
          "verificationId",
          "provider",
          "disclosure",
          "verifiedAt",
          "expiresAt",
          "attestation"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "ai.newnal.trustsquare.verification",
  "lexicon": 1
}

Validate Record

Validate a record against ai.newnal.trustsquare.verification

Validation Options
Automatically resolve and include external schemas for full validation
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:75qhtany5zmo7d3i2ni5d7nf
CID
bafyreigzxqwzlex2abeholcxl36df46fmxjtrfm7ogyrvivhr2ntlgldma
Indexed At
2026-09-13 05:13 UTC
AT-URI
at://did:plc:75qhtany5zmo7d3i2ni5d7nf/com.atproto.lexicon.schema/ai.newnal.trustsquare.verification

Referenced Schemas (1)

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Identity verification status record — proves that a DID has been verified by a trusted verifier.

  • monster.attest.verification recordnot from the namespace authority

    A verifier's statement that it checked a claim and found the proof token in place. Issued by any account, including the attest service's own; trusted as far as the verifier is.

  • Record declaring a verification relationship between two accounts. Verifications are only considered valid by an app if issued by an account the app considers trusted.

  • town.delve.graph.verification recordnot from the namespace authority

    Record declaring a verification relationship between two accounts. Verifications are only considered valid by an app if issued by an account the app considers trusted.

  • network.attested.signature objectnot from the namespace authority

    An inline attestation: an ECDSA signature over a canonical attestation CID, embedded directly in a record's `signatures` array. The CID is computed from the record (signatures stripped), this entry's metadata (cid/signa…

Lexicon Garden

@