Skip to content

airdress.peer_trust.*

The events in the airdress.peer_trust family. How to read a section, and what each audience means, is on the event reference page.

Owner info Functions

A peer trust key was recorded for a subject and purpose that had no live key.

Audience: owner. About the airdress as a whole. Only the owner receives it: the owner’s devices and the owner’s subscriptions.

Where it goes

  • The operator’s journal, as one log line at this level, and the event log, where airdress events tail reads it.
  • Subscriptions that name it, within its audience.
  • Functions bound to this operator’s events (source: operator).

Versions

  • Version 1: first carried by operator v0.1.138.

Data

FieldTypeRequiredDescription
kidstringyes
provenancestringyes
purposestringyes
rotated_outarray of stringyesAlways empty here; kept so both arms carry the same fields.
subjectstringyes
JSON Schema
{
"$schema": "http://json-schema.org/draft-07/schema#",
"description": "A peer trust key was recorded for a subject and purpose that had no live key.",
"properties": {
"kid": {
"type": "string"
},
"provenance": {
"type": "string"
},
"purpose": {
"type": "string"
},
"rotated_out": {
"description": "Always empty here; kept so both arms carry the same fields.",
"items": {
"type": "string"
},
"type": "array"
},
"subject": {
"type": "string"
}
},
"required": [
"kid",
"provenance",
"purpose",
"rotated_out",
"subject"
],
"title": "PeerTrustAdded",
"type": "object"
}
Owner warn Functions

A first-seen peer key changed: the new key was refused, and nothing was recorded, until the owner revokes the old one.

Audience: owner. About the airdress as a whole. Only the owner receives it: the owner’s devices and the owner’s subscriptions.

Where it goes

  • The operator’s journal, as one log line at this level, and the event log, where airdress events tail reads it.
  • Subscriptions that name it, within its audience.
  • Functions bound to this operator’s events (source: operator).

Versions

  • Version 1: first carried by operator v0.1.138.

Data

FieldTypeRequiredDescription
kidstringyes
provenancestringyes
purposestringyes
subjectstringyes
JSON Schema
{
"$schema": "http://json-schema.org/draft-07/schema#",
"description": "A first-seen peer key changed: the new key was refused, and nothing was recorded, until the owner revokes the old one.",
"properties": {
"kid": {
"type": "string"
},
"provenance": {
"type": "string"
},
"purpose": {
"type": "string"
},
"subject": {
"type": "string"
}
},
"required": [
"kid",
"provenance",
"purpose",
"subject"
],
"title": "PeerTrustChanged",
"type": "object"
}
Owner warn Functions

A lower-precedence key disagrees with the trusted one and was ignored. Once per subject and purpose per process.

Audience: owner. About the airdress as a whole. Only the owner receives it: the owner’s devices and the owner’s subscriptions.

Where it goes

  • The operator’s journal, as one log line at this level, and the event log, where airdress events tail reads it.
  • Subscriptions that name it, within its audience.
  • Functions bound to this operator’s events (source: operator).

Versions

  • Version 1: first carried by operator v0.1.138.

Data

FieldTypeRequiredDescription
purposestringyes
subjectstringyes
JSON Schema
{
"$schema": "http://json-schema.org/draft-07/schema#",
"description": "A lower-precedence key disagrees with the trusted one and was ignored. Once per subject and purpose per process.",
"properties": {
"purpose": {
"type": "string"
},
"subject": {
"type": "string"
}
},
"required": [
"purpose",
"subject"
],
"title": "PeerTrustConflict",
"type": "object"
}
Owner info Functions

A live peer trust key was revoked.

Audience: owner. About the airdress as a whole. Only the owner receives it: the owner’s devices and the owner’s subscriptions.

Where it goes

  • The operator’s journal, as one log line at this level, and the event log, where airdress events tail reads it.
  • Subscriptions that name it, within its audience.
  • Functions bound to this operator’s events (source: operator).

Versions

  • Version 1: first carried by operator v0.1.138.

Data

FieldTypeRequiredDescription
kidstringyes
provenancestringyes
purposestringyes
revocation_kindstringyesrotated or compromised; empty when no kind was given.
subjectstringyes
JSON Schema
{
"$schema": "http://json-schema.org/draft-07/schema#",
"description": "A live peer trust key was revoked.",
"properties": {
"kid": {
"type": "string"
},
"provenance": {
"type": "string"
},
"purpose": {
"type": "string"
},
"revocation_kind": {
"description": "`rotated` or `compromised`; empty when no kind was given.",
"type": "string"
},
"subject": {
"type": "string"
}
},
"required": [
"kid",
"provenance",
"purpose",
"revocation_kind",
"subject"
],
"title": "PeerTrustRevoked",
"type": "object"
}
Owner info Functions

A peer trust key was recorded and rotated out the live keys listed in rotated_out (their kids).

Audience: owner. About the airdress as a whole. Only the owner receives it: the owner’s devices and the owner’s subscriptions.

Where it goes

  • The operator’s journal, as one log line at this level, and the event log, where airdress events tail reads it.
  • Subscriptions that name it, within its audience.
  • Functions bound to this operator’s events (source: operator).

Versions

  • Version 1: first carried by operator v0.1.138.

Data

FieldTypeRequiredDescription
kidstringyes
provenancestringyes
purposestringyes
rotated_outarray of stringyes
subjectstringyes
JSON Schema
{
"$schema": "http://json-schema.org/draft-07/schema#",
"description": "A peer trust key was recorded and rotated out the live keys listed in `rotated_out` (their kids).",
"properties": {
"kid": {
"type": "string"
},
"provenance": {
"type": "string"
},
"purpose": {
"type": "string"
},
"rotated_out": {
"items": {
"type": "string"
},
"type": "array"
},
"subject": {
"type": "string"
}
},
"required": [
"kid",
"provenance",
"purpose",
"rotated_out",
"subject"
],
"title": "PeerTrustRotated",
"type": "object"
}