DocumentWriterProjectionWireResponse
A document writer projection: its link-set history, authorizing container paths with KEK levels, and key targets. Every manifest is carried once in bundles and cited by hash.
Shape
object
12 fields
Signed manifest bundles keyed by manifest hash.
omittedBundleslist of stringrequired- each item: not empty
Cited hashes left out because the request said the client holds them.
Public principal policy history the cited manifests depend on.
authorizingContainerPathslist of objectrequired- at least 1 item
Each linked container's path from the root, with one KEK level per manifest.
4 fields
containerIdstringrequired- object
12 fields
accessManifestHashstringrequired- not empty
containerIdstringrequiredcontainerKeyEpochintegerrequired- greater than 0
containerKeyEpochIdstringrequired- not empty
containerManifestHistorylist of stringrequired- each item: not empty
keyEpochobject with any fieldsrequiredkeyEpochHashstringrequired- not empty
keyTargetHashstringrequired- not empty
parentContainerKeyEpochIdstringrequirednullablerecipientTargetslist of object with any fieldsrequired- at least 1 item
wrapslist of object with any fieldsrequired- at least 1 item
Other fields are allowed.
organizationIdstringrequiredpathlist of stringrequired- at least 1 item
- each item: not empty
Other fields are allowed.
contentKeyBundleStalebooleanoptional- always
true
Present only when the stored content-key bundle targets superseded KEKs and must be rewrapped.
- always
documentContainerManifestHistorylist of stringrequired- each item: not empty
documentIdstringrequireddocumentManifeststringrequired- not empty
Hash of the current document link-set manifest.
documentManifestContainerPathslist of list of stringrequired- each item: each item: not empty
documentManifestHistorylist of stringrequired- each item: not empty
Hashes of earlier document link-set manifests.
Other fields are allowed.