Tearleads
Open app

ContainerWriterProjectionWireResponse

A container writer projection: the signed manifests on its path and the KEK levels a client needs to read and write under it. Every manifest is carried once in bundles and cited by hash.

Shape

object

7 fields
  • bundlesmap of string to AccessManifestBundleWireResponserequired

    Signed manifest bundles keyed by manifest hash.

  • omittedBundleslist of stringrequired
    • each item: not empty

    Cited hashes left out because the request said the client holds them.

  • containerIdstringrequired
  • containerKekslist of one of: CitedContainerKekLevel, objectrequired

    One KEK level for each manifest in path.

    1. CitedContainerKekLevel
    2. object
      12 fields
      • accessManifestHashstringrequired
        • not empty
      • containerIdstringrequired
      • containerKeyEpochintegerrequired
        • greater than 0
      • containerKeyEpochIdstringrequired
        • not empty
      • containerManifestHistorylist of stringrequired
        • each item: not empty
      • keyEpochobject with any fieldsrequired
      • keyEpochHashstringrequired
        • not empty
      • keyringContainerKekKeyringWireRecordrequirednullable
      • keyTargetHashstringrequired
        • not empty
      • parentContainerKeyEpochIdstringrequirednullable
      • recipientTargetslist of object with any fieldsrequired
        • at least 1 item
      • wrapslist of object with any fieldsrequired
        • at least 1 item

      Other fields are allowed.

  • organizationIdstringrequired
  • pathlist of stringrequired
    • at least 1 item
    • each item: not empty

    Manifest hashes from the organization's root to this container.

  • policyEvidenceProjectionPolicyEvidenceResponserequired

    Public principal policy history the cited manifests depend on.

Other fields are allowed.

Used by