SpendKeyRecord
PQSafe AgentPay API Reference v0.1.0
PQSafe AgentPay API Reference / SpendKeyRecord
Interface: SpendKeyRecord
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:112
Spend key record: rotated quarterly, signs individual envelopes.
Extends
Properties
certificate
certificate:
SpendKeyCertificate
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:116
Certificate from root key authorizing this spend key.
createdAt
createdAt:
string
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:60
ISO timestamp: when this key was generated.
Inherited from
keyId
keyId:
string
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:54
Unique key ID (UUID v4). Used in certificates and audit logs.
Inherited from
publicKey
publicKey:
string
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:58
Hex-encoded public key bytes.
Inherited from
revoked
revoked:
boolean
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:66
Whether this key has been explicitly revoked (epoch advance or root revocation).
Inherited from
revokedAt?
optionalrevokedAt?:string
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:68
ISO timestamp of revocation (if revoked = true).
Inherited from
rotationQuarter
rotationQuarter:
string
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:118
Quarter this key is active (e.g. “2026-Q2”). For human reference only.
type
type:
"spend"
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:113
validFrom
validFrom:
string
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:62
ISO timestamp: not valid before this time.
Inherited from
validUntil
validUntil:
string
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:64
ISO timestamp: not valid after this time.
Inherited from
variant
variant:
"ml-dsa-65"
Defined in: pqsafe/agent-pay/src/sprint2/issuer.ts:114
ML-DSA variant for this key.