# dev.keytrace.signature

> Published by [keytrace.dev](https://lexicon.garden/identity/did:plc:hcwfdlmprcc335oixyfsw7u3)

✓ This is the authoritative definition for this NSID.

## Links

- [View on Lexicon Garden](https://lexicon.garden/lexicon/did:plc:hcwfdlmprcc335oixyfsw7u3/dev.keytrace.signature)
- [Documentation](https://lexicon.garden/lexicon/did:plc:hcwfdlmprcc335oixyfsw7u3/dev.keytrace.signature/docs)
- [Examples](https://lexicon.garden/lexicon/did:plc:hcwfdlmprcc335oixyfsw7u3/dev.keytrace.signature/examples)

## Definitions

### `dev.keytrace.signature`

**Type**: `object`

A cryptographic signature attesting to a claim

| Property | Type | Required | Description |
|----------|------|----------|-------------|
| `kid` | `string` | Yes | Key identifier (e.g., date in YYYY-MM-DD format). |
| `src` | `string` (at-uri) | Yes | AT URI reference to the signing key record published by the verification service (e.g., at://did:plc:serviceaccount/dev.keytrace.serverPublicKey/2024-01-15). |
| `comment` | `string` | No | Optional comment or description. |
| `signedAt` | `string` (datetime) | Yes | Datetime when the signature was created (ISO 8601). |
| `attestation` | `string` | Yes | The cryptographic signature (base64-encoded). |
| `retractedAt` | `string` (datetime) | No | Datetime when this signature was retracted. Present only if the signature has been retracted (ISO 8601). |
| `signedFields` | `array` | Yes | Ordered list of field names included in the signed payload (e.g., ['did', 'subject', 'type', 'verifiedAt']) |

## Raw Schema

```json
{
  "id": "dev.keytrace.signature",
  "defs": {
    "main": {
      "type": "object",
      "required": [
        "kid",
        "src",
        "signedAt",
        "attestation",
        "signedFields"
      ],
      "properties": {
        "kid": {
          "type": "string",
          "description": "Key identifier (e.g., date in YYYY-MM-DD format)."
        },
        "src": {
          "type": "string",
          "format": "at-uri",
          "description": "AT URI reference to the signing key record published by the verification service (e.g., at://did:plc:serviceaccount/dev.keytrace.serverPublicKey/2024-01-15)."
        },
        "comment": {
          "type": "string",
          "description": "Optional comment or description.",
          "maxGraphemes": 512
        },
        "signedAt": {
          "type": "string",
          "format": "datetime",
          "description": "Datetime when the signature was created (ISO 8601)."
        },
        "attestation": {
          "type": "string",
          "description": "The cryptographic signature (base64-encoded)."
        },
        "retractedAt": {
          "type": "string",
          "format": "datetime",
          "description": "Datetime when this signature was retracted. Present only if the signature has been retracted (ISO 8601)."
        },
        "signedFields": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Ordered list of field names included in the signed payload (e.g., ['did', 'subject', 'type', 'verifiedAt'])"
        }
      },
      "description": "A cryptographic signature attesting to a claim"
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1
}
```