Specification Cheatsheet

Every bundle requires schema validation and a valid ownership proof signature before persistence.

• version: Must be integer 1
• handle: 3–32 characters (lowercase alphanumeric, -)
• keys: Non-empty array of public key objects
• type: ssh-ed25519, ssh-rsa, ssh-ecdsa, pgp, or age
• proof: Ownership challenge signature and signing key

{
  "version": 1,
  "handle": "alice",
  "keys": [{
    "type": "ssh-ed25519",
    "publicKey": "ssh-ed25519 ...",
    "fingerprint": "SHA256:..."
  }],
  "proof": {
    "message": "register alice",
    "signature": "base64...",
    "signedBy": "ssh-ed25519 ..."
  }
}