Skip to content

Nym Issue Request v1

Source schema: doc/schemas/nym-issue-request.v1.schema.json

Machine-readable schema for a participant-signed request to issue a fresh application-layer pseudonym certificate.

Governing Basis

Project Lineage

Requirements

Stories

Fields

Field Required Shape Description
schema/v yes const: 1 Schema version.
request/id yes string Stable identifier of this nym issuance request.
request/type yes const: nym/issue Application-level request discriminator.
participant/id yes string Participant identity asking the council to issue the pseudonym.
nym/id yes string Fresh requested pseudonym identity. In Phase 1 this remains an application-layer identity and MUST NOT leak into the transport boundary.
requested-ttl-seconds yes integer Requested validity window in seconds. The issuer may clamp this value according to local policy.
created-at yes string Creation timestamp of the issuance request.
nonce yes string Fresh base64url-encoded 32-byte nonce used to reduce replay risk on the request path.
signature yes ref: #/$defs/signature
policy_annotations no object

Definitions

Definition Shape Description
signature object
## Field Semantics

schema/v

  • Required: yes
  • Shape: const: 1

Schema version.

request/id

  • Required: yes
  • Shape: string

Stable identifier of this nym issuance request.

request/type

  • Required: yes
  • Shape: const: nym/issue

Application-level request discriminator.

participant/id

  • Required: yes
  • Shape: string

Participant identity asking the council to issue the pseudonym.

nym/id

  • Required: yes
  • Shape: string

Fresh requested pseudonym identity. In Phase 1 this remains an application-layer identity and MUST NOT leak into the transport boundary.

requested-ttl-seconds

  • Required: yes
  • Shape: integer

Requested validity window in seconds. The issuer may clamp this value according to local policy.

created-at

  • Required: yes
  • Shape: string

Creation timestamp of the issuance request.

nonce

  • Required: yes
  • Shape: string

Fresh base64url-encoded 32-byte nonce used to reduce replay risk on the request path.

signature

  • Required: yes
  • Shape: ref: #/$defs/signature

policy_annotations

  • Required: no
  • Shape: object

Definition Semantics

$defs.signature

  • Shape: object