Room Attestation Audit v1¶
Source schema: doc/schemas/room-attestation-audit.v1.schema.json
Operator-visible metadata-only audit event emitted when a room membership attestation request is issued, refused, deduplicated, or rate-limited.
Governing Basis¶
Project Lineage¶
Fields¶
| Field | Required | Shape | Description |
|---|---|---|---|
schema/v |
yes |
const: 1 |
|
audit/id |
yes |
string | |
room/id |
yes |
ref: room.v1.schema.json#/$defs/room_id |
|
request/mode |
yes |
enum: invitee-first-join, member-self, authority-roster |
|
requester/subject |
yes |
ref: room.v1.schema.json#/$defs/subject |
|
subject/ref |
yes |
string | Digest or stable redacted reference for the requested subject; the audit event must not disclose closed-room roster contents to unauthorized viewers. |
decision |
yes |
enum: issued, refused, deduplicated, rate-limited |
|
reason/code |
yes |
string | |
exposure |
no |
enum: private-to-swarm, federation-local, cross-federation, global |
Effective room exposure used for attestation policy evaluation. If the room policy is unavailable, producers may emit the conservative private-to-swarm fallback. |
ttl/requested |
no |
integer | TTL requested by the caller before endpoint caps are applied. |
ttl/granted |
no |
integer | TTL granted by the endpoint after exposure-specific caps are applied. |
high-water/seq-no |
no |
integer | |
attestation/ref |
no |
string | |
dedup/key |
no |
string | |
rate-limit/key |
no |
string | |
observed-at |
yes |
string | |
extensions |
no |
ref: room.v1.schema.json#/$defs/extensions |
|
| ## Field Semantics |
schema/v¶
- Required:
yes - Shape: const:
1
audit/id¶
- Required:
yes - Shape: string
room/id¶
- Required:
yes - Shape: ref:
room.v1.schema.json#/$defs/room_id
request/mode¶
- Required:
yes - Shape: enum:
invitee-first-join,member-self,authority-roster
requester/subject¶
- Required:
yes - Shape: ref:
room.v1.schema.json#/$defs/subject
subject/ref¶
- Required:
yes - Shape: string
Digest or stable redacted reference for the requested subject; the audit event must not disclose closed-room roster contents to unauthorized viewers.
decision¶
- Required:
yes - Shape: enum:
issued,refused,deduplicated,rate-limited
reason/code¶
- Required:
yes - Shape: string
exposure¶
- Required:
no - Shape: enum:
private-to-swarm,federation-local,cross-federation,global
Effective room exposure used for attestation policy evaluation. If the room policy is unavailable, producers may emit the conservative private-to-swarm fallback.
ttl/requested¶
- Required:
no - Shape: integer
TTL requested by the caller before endpoint caps are applied.
ttl/granted¶
- Required:
no - Shape: integer
TTL granted by the endpoint after exposure-specific caps are applied.
high-water/seq-no¶
- Required:
no - Shape: integer
attestation/ref¶
- Required:
no - Shape: string
dedup/key¶
- Required:
no - Shape: string
rate-limit/key¶
- Required:
no - Shape: string
observed-at¶
- Required:
yes - Shape: string
extensions¶
- Required:
no - Shape: ref:
room.v1.schema.json#/$defs/extensions