Tearleads

ContainerKekLogEpochResponse

One epoch of a container's KEK rotation log.

Shape

object

7 fields
  • accessManifestHashstringrequired
    • not empty

    Container manifest head that introduced the epoch.

  • bridgeobject with any fieldsrequirednullable

    The predecessor bridge: the previous epoch's KEK encrypted under this one, or null for the first epoch.

  • containerKeyEpochintegerrequired
    • greater than 0
  • containerKeyEpochIdstringrequired
    • not empty
  • keyringContainerKekKeyringWireRecordrequirednullable

    Keyring sealed under this epoch's KEK, served only for the epoch the request names in keyringForEpoch (a page carries at most one); null otherwise and for the first epoch.

  • parentContainerKeyEpochIdstringrequirednullable

    The parent container's KEK epoch at this epoch, or null for a container with no parent.

  • wrapslist of object with any fieldsrequired
    • at most 16 items

    Recipient wraps issued at this epoch, retained so a member present then can recover the KEK if a bridge is damaged.

Other fields are allowed.

Used by

Schemas