Skip to content

SpendKeyCertificate

PQSafe AgentPay API Reference v0.1.0


PQSafe AgentPay API Reference / SpendKeyCertificate

Interface: SpendKeyCertificate

Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:95

Spend key certificate: issued by root key to a spend key. Carried in the envelope’s keyChain field (Sprint 3+). Allows a verifier to check: root_key -> spend_key -> envelope.

Properties

epoch

epoch: string

Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:106

Epoch this spend key was issued under. Must match the issuer’s current epoch.


issuedAt

issuedAt: string

Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:103


rootKeyId

rootKeyId: string

Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:101


rootPublicKey

rootPublicKey: string

Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:102


rootSignature

rootSignature: string

Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:100

ML-DSA-87 signature by the root key over the canonical cert payload.


spendKeyId

spendKeyId: string

Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:97

The spend key record this certificate is for.


spendKeyPublicKey

spendKeyPublicKey: string

Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:98


validUntil

validUntil: string

Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:104