Room Relay Delivery v1¶
Source schema: doc/schemas/room-relay-delivery.v1.schema.json
Ephemeral member-visible relay delivery that binds a validated Room carrier payload to one relay epoch and total-order sequence. A bounded audience carries source-admission evidence for recipient-filtered payloads but grants no independent authority. The explicit delivery/kind discriminator prevents ambiguity with encrypted deliveries. It MUST NOT contain session bearers.
Governing Basis¶
Project Lineage¶
Fields¶
| Field | Required | Shape | Description |
|---|---|---|---|
schema/v |
yes |
const: 1 |
|
delivery/kind |
yes |
const: member-visible |
|
room/id |
yes |
ref: room.v1.schema.json#/$defs/room_id |
|
relay/epoch |
yes |
integer | |
relay/seq-no |
yes |
integer | |
sender/subject |
yes |
ref: room.v1.schema.json#/$defs/subject |
|
payload/class |
yes |
enum: room-live, sensorium-latest-state, sensorium-status, sensorium-claim, sensorium-control, sensorium-invoke, sensorium-receipt |
|
payload/schema |
yes |
string | |
payload/digest |
yes |
string | |
audience |
yes |
array | Complete bounded recipient-admission set for this member-visible delivery. Every authorized recipient and the content-visible relay can inspect every entry; deployments requiring recipient-set confidentiality must use a sealed profile that does not expose this array. |
payload |
yes |
object | |
accepted-at |
yes |
string |
Conditional Rules¶
Rule 1¶
When:
{
"properties": {
"payload/class": {
"const": "sensorium-latest-state"
}
}
}
Then:
{
"properties": {
"audience": {
"minItems": 1
}
}
}
Field Semantics¶
schema/v¶
- Required:
yes - Shape: const:
1
delivery/kind¶
- Required:
yes - Shape: const:
member-visible
room/id¶
- Required:
yes - Shape: ref:
room.v1.schema.json#/$defs/room_id
relay/epoch¶
- Required:
yes - Shape: integer
relay/seq-no¶
- Required:
yes - Shape: integer
sender/subject¶
- Required:
yes - Shape: ref:
room.v1.schema.json#/$defs/subject
payload/class¶
- Required:
yes - Shape: enum:
room-live,sensorium-latest-state,sensorium-status,sensorium-claim,sensorium-control,sensorium-invoke,sensorium-receipt
payload/schema¶
- Required:
yes - Shape: string
payload/digest¶
- Required:
yes - Shape: string
audience¶
- Required:
yes - Shape: array
Complete bounded recipient-admission set for this member-visible delivery. Every authorized recipient and the content-visible relay can inspect every entry; deployments requiring recipient-set confidentiality must use a sealed profile that does not expose this array.
payload¶
- Required:
yes - Shape: object
accepted-at¶
- Required:
yes - Shape: string