Assess credential chains
As a credential holder or relying party, I want to inspect chain admission, cached dependencies and revocation membership.
These executable statement-model calls preserve the source boundary. Lifecycle synchronization actions do not bypass Checkpoint funding or evidence guards. The theorem statements remain unproved.
Examples below are model fixtures. Their oracle fields describe synthetic verification outcomes; they are not evidence accepted from production callers. The input shown includes common fixture context as well as the call.
flowchart LR
Caller[Caller] -->|Supplied published evidence| Assessment[Evidence assessment]
Assessment -->|Missing required evidence| Unknown[unknown]
Assessment -->|Complete model inputs| Model[Model operation]
Model -->|Predicate fails| Refused[Named refusal]
Model -->|Predicate holds| Result[State, flow or verdict]Admit
As a caller, I want to cache an admitted credential chain and its dependencies.
Operation: credential.admit. The corpus contains 10 observations.
Named refusals:
credential.admit-refused: The named executable source operation returns none.
Accepted example
Caller supplies this model fixture:
{
"params": {
"toadFloor": 2
},
"action": {
"action": "credential.admit",
"hops": [
{
"acdc": {
"body": {
"edge": 1020,
"issuee": 7,
"issuer": 1,
"registry": 10,
"schema": 7
},
"said": 1010
},
"walk": {
"core": {
"e": 10,
"idx": 1,
"kel": {
"establishment": false,
"seals": [
{
"d": 0,
"i": 99,
"s": 0
},
{
"d": 11010,
"i": 1010,
"s": 0
}
],
"sn": 15
},
"succ": 20
},
"tel": {
"i": 1010,
"kind": "iss",
"ri": 10,
"s": 0
}
}
},
{
"acdc": {
"body": {
"edge": null,
"issuee": 1,
"issuer": 2,
"registry": 20,
"schema": 8
},
"said": 1020
},
"walk": {
"core": {
"e": 10,
"idx": 1,
"kel": {
"establishment": false,
"seals": [
{
"d": 0,
"i": 99,
"s": 0
},
{
"d": 11020,
"i": 1020,
"s": 0
}
],
"sn": 15
},
"succ": 20
},
"tel": {
"i": 1020,
"kind": "iss",
"ri": 20,
"s": 0
}
}
}
],
"key": 7,
"now": 100
},
"policy": {
"maxDepth": 2,
"notAfter": 5,
"root": 2,
"schemas": [
7,
8
]
},
"state": {
"cage": [],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [],
"rid": 20
},
"rid": 20
}
]
},
"oracle": {
"receipted": true,
"signatureEpoch": null,
"signed": true
}
}
Caller obtains:
{
"status": "accepted",
"value": {
"cage": [
{
"admission": {
"admittedAt": 100,
"deps": [
{
"e": 10,
"epoch": 1,
"issuer": 1,
"k": 15,
"verdict": "final"
},
{
"e": 10,
"epoch": 1,
"issuer": 2,
"k": 15,
"verdict": "final"
}
],
"registries": [
10,
20
],
"saids": [
1010,
1020
],
"verdict": "final"
},
"key": 7
}
],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [],
"rid": 20
},
"rid": 20
}
]
}
}
Refused example
Caller supplies this model fixture:
{
"params": {
"toadFloor": 2
},
"action": {
"action": "credential.admit",
"hops": [
{
"acdc": {
"body": {
"edge": 1020,
"issuee": 7,
"issuer": 1,
"registry": 10,
"schema": 7
},
"said": 1010
},
"walk": {
"core": {
"e": 10,
"idx": 1,
"kel": {
"establishment": false,
"seals": [
{
"d": 0,
"i": 99,
"s": 0
},
{
"d": 11010,
"i": 1010,
"s": 0
}
],
"sn": 15
},
"succ": 20
},
"tel": {
"i": 1010,
"kind": "iss",
"ri": 10,
"s": 0
}
}
},
{
"acdc": {
"body": {
"edge": null,
"issuee": 1,
"issuer": 2,
"registry": 20,
"schema": 8
},
"said": 1020
},
"walk": {
"core": {
"e": 10,
"idx": 1,
"kel": {
"establishment": false,
"seals": [
{
"d": 0,
"i": 99,
"s": 0
},
{
"d": 11020,
"i": 1020,
"s": 0
}
],
"sn": 15
},
"succ": 20
},
"tel": {
"i": 1020,
"kind": "iss",
"ri": 20,
"s": 0
}
}
}
],
"key": 7,
"now": 100
},
"policy": {
"maxDepth": 2,
"notAfter": 5,
"root": 2,
"schemas": [
7,
8
]
},
"state": {
"cage": [
{
"admission": {
"admittedAt": 100,
"deps": [
{
"e": 10,
"epoch": 1,
"issuer": 1,
"k": 15,
"verdict": "final"
},
{
"e": 10,
"epoch": 1,
"issuer": 2,
"k": 15,
"verdict": "final"
}
],
"registries": [
10,
20
],
"saids": [
1010,
1020
],
"verdict": "final"
},
"key": 7
}
],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [],
"rid": 20
},
"rid": 20
}
]
},
"oracle": {
"receipted": true,
"signatureEpoch": null,
"signed": true
}
}
Caller obtains:
{
"status": "refused",
"refusal": "credential.admit-refused"
}
Admit Chain
As a caller, I want to assess a leaf-first credential chain against policy.
Operation: credential.admitChain. The corpus contains 2 observations.
Named refusals:
credential.admitChain-refused: The named executable source operation returns none.
Accepted example
Caller supplies this model fixture:
{
"params": {
"toadFloor": 2
},
"action": {
"action": "credential.admitChain",
"hops": [
{
"acdc": {
"body": {
"edge": 1020,
"issuee": 7,
"issuer": 1,
"registry": 10,
"schema": 7
},
"said": 1010
},
"walk": {
"core": {
"e": 10,
"idx": 1,
"kel": {
"establishment": false,
"seals": [
{
"d": 0,
"i": 99,
"s": 0
},
{
"d": 11010,
"i": 1010,
"s": 0
}
],
"sn": 15
},
"succ": 20
},
"tel": {
"i": 1010,
"kind": "iss",
"ri": 10,
"s": 0
}
}
},
{
"acdc": {
"body": {
"edge": null,
"issuee": 1,
"issuer": 2,
"registry": 20,
"schema": 8
},
"said": 1020
},
"walk": {
"core": {
"e": 10,
"idx": 1,
"kel": {
"establishment": false,
"seals": [
{
"d": 0,
"i": 99,
"s": 0
},
{
"d": 11020,
"i": 1020,
"s": 0
}
],
"sn": 15
},
"succ": 20
},
"tel": {
"i": 1020,
"kind": "iss",
"ri": 20,
"s": 0
}
}
}
]
},
"policy": {
"maxDepth": 2,
"notAfter": 5,
"root": 2,
"schemas": [
7,
8
]
},
"state": {
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [],
"rid": 20
},
"rid": 20
}
]
},
"oracle": {
"receipted": true,
"signatureEpoch": null,
"signed": true
}
}
Caller obtains:
{
"status": "accepted",
"value": "final"
}
Refused example
Caller supplies this model fixture:
{
"params": {
"toadFloor": 2
},
"action": {
"action": "credential.admitChain",
"hops": [
{
"acdc": {
"body": {
"edge": 1020,
"issuee": 7,
"issuer": 1,
"registry": 10,
"schema": 7
},
"said": 1010
},
"walk": {
"core": {
"e": 10,
"idx": 1,
"kel": {
"establishment": false,
"seals": [
{
"d": 0,
"i": 99,
"s": 0
},
{
"d": 11010,
"i": 1010,
"s": 0
}
],
"sn": 15
},
"succ": 20
},
"tel": {
"i": 1010,
"kind": "iss",
"ri": 10,
"s": 0
}
}
},
{
"acdc": {
"body": {
"edge": null,
"issuee": 1,
"issuer": 2,
"registry": 20,
"schema": 8
},
"said": 1020
},
"walk": {
"core": {
"e": 10,
"idx": 1,
"kel": {
"establishment": false,
"seals": [
{
"d": 0,
"i": 99,
"s": 0
},
{
"d": 11020,
"i": 1020,
"s": 0
}
],
"sn": 15
},
"succ": 20
},
"tel": {
"i": 1020,
"kind": "iss",
"ri": 20,
"s": 0
}
}
}
]
},
"policy": {
"maxDepth": 2,
"notAfter": 5,
"root": 2,
"schemas": [
7,
8
]
},
"state": {
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [
1020
],
"rid": 20
},
"rid": 20
}
]
},
"oracle": {
"receipted": true,
"signatureEpoch": null,
"signed": true
}
}
Caller obtains:
{
"status": "refused",
"refusal": "credential.admitChain-refused"
}
Evict
As a caller, I want to remove an admission whose history dependency moved.
Operation: credential.evict. The corpus contains 3 observations.
Named refusals:
credential.evict-refused: The named executable source operation returns none.
Accepted example
Caller supplies this model fixture:
{
"params": {
"toadFloor": 2
},
"action": {
"action": "credential.evict",
"key": 7
},
"policy": {
"maxDepth": 2,
"notAfter": 5,
"root": 2,
"schemas": [
7,
8
]
},
"state": {
"cage": [
{
"admission": {
"admittedAt": 100,
"deps": [
{
"e": 20,
"epoch": 2,
"issuer": 1,
"k": 25,
"verdict": "provisional"
},
{
"e": 10,
"epoch": 1,
"issuer": 2,
"k": 15,
"verdict": "final"
}
],
"registries": [
10,
20
],
"saids": [
1010,
1020
],
"verdict": "provisional"
},
"key": 7
}
],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 3,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
},
{
"leaf": {
"epoch": 3,
"prev": 20,
"toad": 2
},
"sn": 23
}
],
"latest": 23,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [],
"rid": 20
},
"rid": 20
}
]
},
"oracle": {
"receipted": true,
"signatureEpoch": null,
"signed": true
}
}
Caller obtains:
{
"status": "accepted",
"value": {
"cage": [],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 3,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
},
{
"leaf": {
"epoch": 3,
"prev": 20,
"toad": 2
},
"sn": 23
}
],
"latest": 23,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [],
"rid": 20
},
"rid": 20
}
]
}
}
Refused example
Caller supplies this model fixture:
{
"params": {
"toadFloor": 2
},
"action": {
"action": "credential.evict",
"key": 7
},
"policy": {
"maxDepth": 2,
"notAfter": 5,
"root": 2,
"schemas": [
7,
8
]
},
"state": {
"cage": [
{
"admission": {
"admittedAt": 100,
"deps": [
{
"e": 10,
"epoch": 1,
"issuer": 1,
"k": 15,
"verdict": "final"
},
{
"e": 10,
"epoch": 1,
"issuer": 2,
"k": 15,
"verdict": "final"
}
],
"registries": [
10,
20
],
"saids": [
1010,
1020
],
"verdict": "final"
},
"key": 7
}
],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [],
"rid": 20
},
"rid": 20
}
]
},
"oracle": {
"receipted": true,
"signatureEpoch": null,
"signed": true
}
}
Caller obtains:
{
"status": "refused",
"refusal": "credential.evict-refused"
}
Gate
As a caller, I want to evaluate a cached admission against age and current mirror membership.
Operation: credential.gate. The corpus contains 4 observations.
This query returns a Boolean. False is an evaluated result, not a refusal.
Evaluated true example
Caller supplies this model fixture:
{
"params": {
"toadFloor": 2
},
"action": {
"action": "credential.gate",
"key": 7,
"now": 105
},
"policy": {
"maxDepth": 2,
"notAfter": 5,
"root": 2,
"schemas": [
7,
8
]
},
"state": {
"cage": [
{
"admission": {
"admittedAt": 100,
"deps": [
{
"e": 10,
"epoch": 1,
"issuer": 1,
"k": 15,
"verdict": "final"
},
{
"e": 10,
"epoch": 1,
"issuer": 2,
"k": 15,
"verdict": "final"
}
],
"registries": [
10,
20
],
"saids": [
1010,
1020
],
"verdict": "final"
},
"key": 7
}
],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [],
"rid": 20
},
"rid": 20
}
]
},
"oracle": {
"receipted": true,
"signatureEpoch": null,
"signed": true
}
}
Caller obtains:
{
"status": "accepted",
"value": true
}
Evaluated false example
Caller supplies this model fixture:
{
"params": {
"toadFloor": 2
},
"action": {
"action": "credential.gate",
"key": 7,
"now": 106
},
"policy": {
"maxDepth": 2,
"notAfter": 5,
"root": 2,
"schemas": [
7,
8
]
},
"state": {
"cage": [
{
"admission": {
"admittedAt": 100,
"deps": [
{
"e": 10,
"epoch": 1,
"issuer": 1,
"k": 15,
"verdict": "final"
},
{
"e": 10,
"epoch": 1,
"issuer": 2,
"k": 15,
"verdict": "final"
}
],
"registries": [
10,
20
],
"saids": [
1010,
1020
],
"verdict": "final"
},
"key": 7
}
],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [],
"rid": 20
},
"rid": 20
}
]
},
"oracle": {
"receipted": true,
"signatureEpoch": null,
"signed": true
}
}
Caller obtains:
{
"status": "accepted",
"value": false
}
Mirror
As a caller, I want to update the mirror state used by credential admission.
Operation: credential.mirror. The corpus contains 2 observations.
Named refusals:
credential.mirror-refused: The named executable source operation returns none.
Accepted example
Caller supplies this model fixture:
{
"params": {
"toadFloor": 2
},
"action": {
"action": "credential.mirror",
"mirrorAction": {
"action": "mirror.push",
"w": {
"core": {
"e": 10,
"idx": 1,
"kel": {
"establishment": false,
"seals": [
{
"d": 0,
"i": 99,
"s": 0
},
{
"d": 11020,
"i": 1020,
"s": 1
}
],
"sn": 15
},
"succ": 20
},
"tel": {
"i": 1020,
"kind": "rev",
"ri": 20,
"s": 1
}
}
}
},
"policy": {
"maxDepth": 2,
"notAfter": 5,
"root": 2,
"schemas": [
7,
8
]
},
"state": {
"cage": [
{
"admission": {
"admittedAt": 100,
"deps": [
{
"e": 10,
"epoch": 1,
"issuer": 1,
"k": 15,
"verdict": "final"
},
{
"e": 10,
"epoch": 1,
"issuer": 2,
"k": 15,
"verdict": "final"
}
],
"registries": [
10,
20
],
"saids": [
1010,
1020
],
"verdict": "final"
},
"key": 7
}
],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [],
"rid": 20
},
"rid": 20
}
]
},
"oracle": {
"receipted": true,
"signatureEpoch": null,
"signed": true
}
}
Caller obtains:
{
"status": "accepted",
"value": {
"cage": [
{
"admission": {
"admittedAt": 100,
"deps": [
{
"e": 10,
"epoch": 1,
"issuer": 1,
"k": 15,
"verdict": "final"
},
{
"e": 10,
"epoch": 1,
"issuer": 2,
"k": 15,
"verdict": "final"
}
],
"registries": [
10,
20
],
"saids": [
1010,
1020
],
"verdict": "final"
},
"key": 7
}
],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [
1020
],
"rid": 20
},
"rid": 20
}
]
}
}
Refused example
Caller supplies this model fixture:
{
"params": {
"toadFloor": 2
},
"action": {
"action": "credential.mirror",
"mirrorAction": {
"action": "mirror.push",
"w": {
"core": {
"e": 10,
"idx": 1,
"kel": {
"establishment": false,
"seals": [
{
"d": 0,
"i": 99,
"s": 0
},
{
"d": 11020,
"i": 1020,
"s": 1
}
],
"sn": 15
},
"succ": 20
},
"tel": {
"i": 1020,
"kind": "rev",
"ri": 20,
"s": 1
}
}
}
},
"policy": {
"maxDepth": 2,
"notAfter": 5,
"root": 2,
"schemas": [
7,
8
]
},
"state": {
"cage": [
{
"admission": {
"admittedAt": 100,
"deps": [
{
"e": 10,
"epoch": 1,
"issuer": 1,
"k": 15,
"verdict": "final"
},
{
"e": 10,
"epoch": 1,
"issuer": 2,
"k": 15,
"verdict": "final"
}
],
"registries": [
10,
20
],
"saids": [
1010,
1020
],
"verdict": "final"
},
"key": 7
}
],
"ckpt": [
{
"aid": 1,
"checkpoint": {
"aid": 1,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
},
{
"aid": 2,
"checkpoint": {
"aid": 2,
"cur": 2,
"hist": [
{
"leaf": {
"epoch": 0,
"prev": null,
"toad": 2
},
"sn": 0
},
{
"leaf": {
"epoch": 1,
"prev": 0,
"toad": 2
},
"sn": 10
},
{
"leaf": {
"epoch": 2,
"prev": 10,
"toad": 2
},
"sn": 20
}
],
"latest": 20,
"parent": null
}
}
],
"reg": [
{
"registry": {
"issuer": 1,
"revoked": [],
"rid": 10
},
"rid": 10
},
{
"registry": {
"issuer": 2,
"revoked": [
1020
],
"rid": 20
},
"rid": 20
}
]
},
"oracle": {
"receipted": true,
"signatureEpoch": null,
"signed": true
}
}
Caller obtains:
{
"status": "refused",
"refusal": "credential.mirror-refused"
}
Download every example · Read the complete shape · Read semantics and limits