org.zerosum.deviceKey

bandaco.bsky.social

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "A per-device public key bound to an account DID.",
      "key": "tid",
      "record": {
        "properties": {
          "bindingSig": {
            "description": "base64url ed25519 signature by the device key over the account DID.",
            "type": "string"
          },
          "createdAt": {
            "description": "When this device key was registered.",
            "format": "datetime",
            "type": "string"
          },
          "did": {
            "description": "did:key form of the device public key.",
            "format": "did",
            "type": "string"
          },
          "label": {
            "description": "Optional human-readable device label.",
            "maxLength": 64,
            "type": "string"
          },
          "publicKeyMultibase": {
            "description": "Multibase-encoded multicodec ed25519 public key.",
            "type": "string"
          }
        },
        "required": [
          "publicKeyMultibase",
          "did",
          "createdAt",
          "bindingSig"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "org.zerosum.deviceKey",
  "lexicon": 1
}

Validate Record

Validate a record against org.zerosum.deviceKey

Validation Options
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:lc2sd5msatepbr55mhtwgdvy
CID
bafyreicopd2kqs3hugvsondiclbw74n5wjp3cchls4kixxtjzzw4zkb2mi
Indexed At
2026-09-09 17:13 UTC
AT-URI
at://did:plc:lc2sd5msatepbr55mhtwgdvy/com.atproto.lexicon.schema/org.zerosum.deviceKey

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Associates a device key with a DID, enabling key→DID lookup for vouch graph traversal and service authorization.

  • Publishes the public half of a badge.blue attestation key that this repo signs market.* records with. The record key is the key's did:key, so a verifier can look up a key by did:key directly in the author's PDS repo —…

  • A user-published public key.

  • establishes a bidirectional many-to-many link between a DID and an associated GPG key. the rkey of this record must be the fingerprint of the GPG key, encoded in lowercase hexadecimal with no prefix, suffix, or delimite…

  • A cryptographic signature attesting to a claim

Lexicon Garden

@