PrincipalStateResponse
Shape
object
22 fields
createdAtstringrequiredencapsulationPublicKeystringrequiredThe principal's public key at this key epoch; key material for the principal is wrapped to it.
For a group administered by the organization, the exact
Adminshead that authorized this state; null when the state's own policy authorized it.grantCountintegerrequired- at least 0
Number of container grants the principal holds.
grantRootstringrequiredDigest of the sorted container grants; with
grantCountit authenticates the complete grant list.keyEpochintegerrequired- at least 1
The principal's key epoch; envelopes and wraps name the epoch they were made for.
keyFingerprintstringrequiredFingerprint of
encapsulationPublicKey.memberCountintegerrequired- at least 0
memberEnvelopesRootstringrequiredDigest committing to every member envelope of this key epoch.
membershipModestringrequired- always
projection
Always
projection: membership is the signed projection list.- always
membershipRootstringrequiredpayloadCiphertextHashstringrequiredHash of the state's encrypted payload.
prevStateHashstringrequirednullableHash of the previous state, or null for the first.
principalIdstringrequiredprincipalTypestringrequired- one of
group,organization
- one of
projectionRootstringrequiredsignaturestringrequiredML-DSA-87 signature over the canonical state.
signedAtstringrequiredsignerUserIdstringrequiredsignerUserKeyFingerprintstringrequiredSigning key fingerprint of the signer.
stateHashstringrequiredHash of this signed state; other objects cite the head by it.
versionintegerrequired- at least 1
Position in the chain, starting at 1.
Other fields are allowed.