{
  "lexicon": 1,
  "id": "com.publicdomainrelay.temp.badgeBlueKeys",
  "defs": {
    "main": {
      "type": "record",
      "description": "Associates a device key with a DID, enabling key→DID lookup for vouch graph traversal and service authorization.",
      "key": "any",
      "record": {
        "type": "object",
        "required": ["keyId", "challenge", "createdAt"],
        "properties": {
          "keyId": {
            "type": "string",
            "description": "Identifier for the device key (e.g. soft-<uuid> or a did:key)."
          },
          "name": {
            "type": "string",
            "description": "Human-readable name or label for this key association (e.g. hostname)."
          },
          "challenge": {
            "type": "string",
            "format": "did",
            "description": "DID that this key is bound to."
          },
          "service": {
            "type": "string",
            "description": "Service scope for this key association."
          },
          "createdAt": {
            "type": "string",
            "format": "datetime"
          }
        }
      }
    }
  }
}