dev.keytrace.signature

keytrace.dev

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "A cryptographic signature attesting to a claim",
      "properties": {
        "attestation": {
          "description": "The cryptographic signature (base64-encoded).",
          "type": "string"
        },
        "comment": {
          "description": "Optional comment or description.",
          "maxGraphemes": 512,
          "type": "string"
        },
        "kid": {
          "description": "Key identifier (e.g., date in YYYY-MM-DD format).",
          "type": "string"
        },
        "retractedAt": {
          "description": "Datetime when this signature was retracted. Present only if the signature has been retracted (ISO 8601).",
          "format": "datetime",
          "type": "string"
        },
        "signedAt": {
          "description": "Datetime when the signature was created (ISO 8601).",
          "format": "datetime",
          "type": "string"
        },
        "signedFields": {
          "description": "Ordered list of field names included in the signed payload (e.g., ['did', 'subject', 'type', 'verifiedAt'])",
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        "src": {
          "description": "AT URI reference to the signing key record published by the verification service (e.g., at://did:plc:serviceaccount/dev.keytrace.serverPublicKey/2024-01-15).",
          "format": "at-uri",
          "type": "string"
        }
      },
      "required": [
        "kid",
        "src",
        "signedAt",
        "attestation",
        "signedFields"
      ],
      "type": "object"
    }
  },
  "id": "dev.keytrace.signature",
  "lexicon": 1
}

Validate Record

Validate a record against dev.keytrace.signature

Validation Options
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:hcwfdlmprcc335oixyfsw7u3
CID
bafyreifv2ulbmud5w2slyhfqobjief5t47p3rwgmcigejgoi6kouya25sy
Indexed At
2026-03-22 16:41 UTC
AT-URI
at://did:plc:hcwfdlmprcc335oixyfsw7u3/com.atproto.lexicon.schema/dev.keytrace.signature

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • A public statement signed by one of the user's own published public keys (dev.keytrace.userPublicKey).

  • network.attested.signature objectnot from the namespace authority

    An inline attestation: an ECDSA signature over a canonical attestation CID, embedded directly in a record's `signatures` array. The CID is computed from the record (signatures stripped), this entry's metadata (cid/signa…

  • Common type definitions for cryptographic signatures attached to records, per the ATProtocol Attestation Specification.

  • An identity claim linking this DID to an external account

  • A cryptographic proof that a did-git object was signed by a specific DID. This provides key-rotation-independent verification by anchoring the proof to a PDS or signing event.

Lexicon Garden

@