[{"data":1,"prerenderedAt":3044},["ShallowReactive",2],{"navigation":3,"\u002Fservices\u002Fattestation":927,"mdc--u5mbys-key":3004,"mdc-c3m2rq-key":3020,"mdc-w0tzsl-key":3032},[4,40,114,446,474,498,596,903],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,14,28,32,36],{"title":10,"path":6,"stem":11,"access":12,"icon":13},"Overview","architecture\u002Findex","public","i-lucide-network",{"title":10,"path":15,"stem":16,"children":17,"access":12,"icon":19},"\u002Farchitecture\u002Fkernel","architecture\u002F1.kernel\u002Findex",[18,20,24],{"title":10,"path":15,"stem":16,"access":12,"icon":19},"i-lucide-box",{"title":21,"path":22,"stem":23,"access":12},"Enclave","\u002Farchitecture\u002Fkernel\u002Fenclave","architecture\u002F1.kernel\u002Fenclave",{"title":25,"path":26,"stem":27,"access":12},"Forking the enclave","\u002Farchitecture\u002Fkernel\u002Fforking-the-enclave","architecture\u002F1.kernel\u002Fforking-the-enclave",{"title":29,"path":30,"stem":31,"access":12},"Ports","\u002Farchitecture\u002Fports","architecture\u002F2.ports",{"title":33,"path":34,"stem":35,"access":12},"Service layers","\u002Farchitecture\u002Fservice-layers","architecture\u002F3.service-layers",{"title":37,"path":38,"stem":39,"access":12},"Families","\u002Farchitecture\u002Ffamilies","architecture\u002F4.families",{"title":41,"path":42,"stem":43,"children":44},"Core","\u002Fcore","core",[45,47,50,53,56,88,97],{"title":10,"path":42,"stem":46,"access":12,"icon":19},"core\u002Findex",{"title":10,"path":48,"stem":49,"access":12},"\u002Fcore\u002F01-overview","core\u002F01-overview",{"title":10,"path":51,"stem":52,"access":12},"\u002Fcore\u002F05-stores","core\u002F05-stores",{"title":10,"path":54,"stem":55,"access":12},"\u002Fcore\u002F06-permissions-and-keyring","core\u002F06-permissions-and-keyring",{"title":10,"path":57,"stem":58,"children":59,"access":12},"\u002Fcore\u002Fnoydb","core\u002F2.noydb\u002Findex",[60,61,65,68,72,76,80,84],{"title":10,"path":57,"stem":58,"access":12},{"title":62,"path":63,"stem":64,"access":12},"Noydb","\u002Fcore\u002Fnoydb\u002Fmethods","core\u002F2.noydb\u002F1.methods",{"title":21,"path":66,"stem":67,"access":12},"\u002Fcore\u002Fnoydb\u002Fenclave","core\u002F2.noydb\u002F2.enclave",{"title":69,"path":70,"stem":71,"access":12},"Secret & keyring","\u002Fcore\u002Fnoydb\u002Fkeyring","core\u002F2.noydb\u002F3.keyring",{"title":73,"path":74,"stem":75,"access":12},"Authentication","\u002Fcore\u002Fnoydb\u002Fauthentication","core\u002F2.noydb\u002F4.authentication",{"title":77,"path":78,"stem":79,"access":12},"Auth recovery","\u002Fcore\u002Fnoydb\u002Frecovery","core\u002F2.noydb\u002F5.recovery",{"title":81,"path":82,"stem":83,"access":12},"Configuration","\u002Fcore\u002Fnoydb\u002Fconfiguration","core\u002F2.noydb\u002F6.configuration",{"title":85,"path":86,"stem":87,"access":12},"Strategies","\u002Fcore\u002Fnoydb\u002Fstrategies","core\u002F2.noydb\u002F7.strategies",{"title":10,"path":89,"stem":90,"children":91,"access":12},"\u002Fcore\u002Fvault","core\u002F3.vault\u002Findex",[92,93],{"title":10,"path":89,"stem":90,"access":12},{"title":94,"path":95,"stem":96,"access":12},"Vault","\u002Fcore\u002Fvault\u002Fmethods","core\u002F3.vault\u002F1.methods",{"title":10,"path":98,"stem":99,"children":100,"access":12},"\u002Fcore\u002Fcollection","core\u002F4.collection\u002Findex",[101,102,106,110],{"title":10,"path":98,"stem":99,"access":12},{"title":103,"path":104,"stem":105,"access":12},"Collection","\u002Fcore\u002Fcollection\u002Fmethods","core\u002F4.collection\u002F1.methods",{"title":107,"path":108,"stem":109,"access":12},"Querying","\u002Fcore\u002Fcollection\u002Fquerying","core\u002F4.collection\u002F2.querying",{"title":111,"path":112,"stem":113,"access":12},"Schema","\u002Fcore\u002Fcollection\u002Fschema","core\u002F4.collection\u002F3.schema",{"title":37,"path":115,"stem":116,"children":117},"\u002Ffamilies","families",[118,121,168,194,208,212,216,294,340],{"title":10,"path":115,"stem":119,"access":12,"icon":120},"families\u002Findex","i-lucide-plug",{"title":122,"path":123,"stem":124,"children":125,"access":12,"icon":127},"as-Exports","\u002Ffamilies\u002Fas","families\u002Fas\u002Findex",[126,128,132,136,140,144,148,152,156,160,164],{"title":122,"path":123,"stem":124,"access":12,"icon":127},"i-lucide-book-open",{"title":129,"path":130,"stem":131,"access":12},"aws-s3","\u002Ffamilies\u002Fas\u002Faws-s3","families\u002Fas\u002Faws-s3",{"title":133,"path":134,"stem":135,"access":12},"blob","\u002Ffamilies\u002Fas\u002Fblob","families\u002Fas\u002Fblob",{"title":137,"path":138,"stem":139,"access":12},"csv","\u002Ffamilies\u002Fas\u002Fcsv","families\u002Fas\u002Fcsv",{"title":141,"path":142,"stem":143,"access":12},"json","\u002Ffamilies\u002Fas\u002Fjson","families\u002Fas\u002Fjson",{"title":145,"path":146,"stem":147,"access":12},"ndjson","\u002Ffamilies\u002Fas\u002Fndjson","families\u002Fas\u002Fndjson",{"title":149,"path":150,"stem":151,"access":12},"noydb","\u002Ffamilies\u002Fas\u002Fnoydb","families\u002Fas\u002Fnoydb",{"title":153,"path":154,"stem":155,"access":12},"sql","\u002Ffamilies\u002Fas\u002Fsql","families\u002Fas\u002Fsql",{"title":157,"path":158,"stem":159,"access":12},"xlsx","\u002Ffamilies\u002Fas\u002Fxlsx","families\u002Fas\u002Fxlsx",{"title":161,"path":162,"stem":163,"access":12},"xml","\u002Ffamilies\u002Fas\u002Fxml","families\u002Fas\u002Fxml",{"title":165,"path":166,"stem":167,"access":12},"zip","\u002Ffamilies\u002Fas\u002Fzip","families\u002Fas\u002Fzip",{"title":169,"path":170,"stem":171,"children":172,"access":12,"icon":127},"at-Seals","\u002Ffamilies\u002Fat","families\u002Fat\u002Findex",[173,174,178,182,186,190],{"title":169,"path":170,"stem":171,"access":12,"icon":127},{"title":175,"path":176,"stem":177,"access":12},"aws-kms","\u002Ffamilies\u002Fat\u002Faws-kms","families\u002Fat\u002Faws-kms",{"title":179,"path":180,"stem":181,"access":12},"azure-keyvault","\u002Ffamilies\u002Fat\u002Fazure-keyvault","families\u002Fat\u002Fazure-keyvault",{"title":183,"path":184,"stem":185,"access":12},"env","\u002Ffamilies\u002Fat\u002Fenv","families\u002Fat\u002Fenv",{"title":187,"path":188,"stem":189,"access":12},"gcp-kms","\u002Ffamilies\u002Fat\u002Fgcp-kms","families\u002Fat\u002Fgcp-kms",{"title":191,"path":192,"stem":193,"access":12},"macos-keychain","\u002Ffamilies\u002Fat\u002Fmacos-keychain","families\u002Fat\u002Fmacos-keychain",{"title":195,"path":196,"stem":197,"children":198,"access":12,"icon":127},"by-Sessions","\u002Ffamilies\u002Fby","families\u002Fby\u002Findex",[199,200,204],{"title":195,"path":196,"stem":197,"access":12,"icon":127},{"title":201,"path":202,"stem":203,"access":12},"peer","\u002Ffamilies\u002Fby\u002Fpeer","families\u002Fby\u002Fpeer",{"title":205,"path":206,"stem":207,"access":12},"tabs","\u002Ffamilies\u002Fby\u002Ftabs","families\u002Fby\u002Ftabs",{"title":209,"path":210,"stem":211,"access":12},"Classifying a package","\u002Ffamilies\u002Fclassification","families\u002Fclassification",{"title":213,"path":214,"stem":215,"access":12},"Command-line tools","\u002Ffamilies\u002Fcli","families\u002Fcli",{"title":217,"path":218,"stem":219,"children":220,"access":12,"icon":127},"in-Frameworks","\u002Ffamilies\u002Fin","families\u002Fin\u002Findex",[221,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290],{"title":217,"path":218,"stem":219,"access":12,"icon":127},{"title":223,"path":224,"stem":225,"access":12},"ai","\u002Ffamilies\u002Fin\u002Fai","families\u002Fin\u002Fai",{"title":227,"path":228,"stem":229,"access":12},"devtools","\u002Ffamilies\u002Fin\u002Fdevtools","families\u002Fin\u002Fdevtools",{"title":231,"path":232,"stem":233,"access":12},"devtools-tui","\u002Ffamilies\u002Fin\u002Fdevtools-tui","families\u002Fin\u002Fdevtools-tui",{"title":235,"path":236,"stem":237,"access":12},"liff","\u002Ffamilies\u002Fin\u002Fliff","families\u002Fin\u002Fliff",{"title":239,"path":240,"stem":241,"access":12},"nextjs","\u002Ffamilies\u002Fin\u002Fnextjs","families\u002Fin\u002Fnextjs",{"title":243,"path":244,"stem":245,"access":12},"nuxt","\u002Ffamilies\u002Fin\u002Fnuxt","families\u002Fin\u002Fnuxt",{"title":247,"path":248,"stem":249,"access":12},"pinia","\u002Ffamilies\u002Fin\u002Fpinia","families\u002Fin\u002Fpinia",{"title":251,"path":252,"stem":253,"access":12},"pwa","\u002Ffamilies\u002Fin\u002Fpwa","families\u002Fin\u002Fpwa",{"title":255,"path":256,"stem":257,"access":12},"react","\u002Ffamilies\u002Fin\u002Freact","families\u002Fin\u002Freact",{"title":259,"path":260,"stem":261,"access":12},"relay","\u002Ffamilies\u002Fin\u002Frelay","families\u002Fin\u002Frelay",{"title":263,"path":264,"stem":265,"access":12},"rest","\u002Ffamilies\u002Fin\u002Frest","families\u002Fin\u002Frest",{"title":267,"path":268,"stem":269,"access":12},"solid","\u002Ffamilies\u002Fin\u002Fsolid","families\u002Fin\u002Fsolid",{"title":271,"path":272,"stem":273,"access":12},"svelte","\u002Ffamilies\u002Fin\u002Fsvelte","families\u002Fin\u002Fsvelte",{"title":275,"path":276,"stem":277,"access":12},"tanstack-query","\u002Ffamilies\u002Fin\u002Ftanstack-query","families\u002Fin\u002Ftanstack-query",{"title":279,"path":280,"stem":281,"access":12},"tanstack-table","\u002Ffamilies\u002Fin\u002Ftanstack-table","families\u002Fin\u002Ftanstack-table",{"title":283,"path":284,"stem":285,"access":12},"vue","\u002Ffamilies\u002Fin\u002Fvue","families\u002Fin\u002Fvue",{"title":287,"path":288,"stem":289,"access":12},"yjs","\u002Ffamilies\u002Fin\u002Fyjs","families\u002Fin\u002Fyjs",{"title":291,"path":292,"stem":293,"access":12},"zustand","\u002Ffamilies\u002Fin\u002Fzustand","families\u002Fin\u002Fzustand",{"title":295,"path":296,"stem":297,"children":298,"access":12,"icon":127},"on-Auth","\u002Ffamilies\u002Fon","families\u002Fon\u002Findex",[299,300,304,308,312,316,320,324,328,332,336],{"title":295,"path":296,"stem":297,"access":12,"icon":127},{"title":301,"path":302,"stem":303,"access":12},"email-otp","\u002Ffamilies\u002Fon\u002Femail-otp","families\u002Fon\u002Femail-otp",{"title":305,"path":306,"stem":307,"access":12},"magic-link","\u002Ffamilies\u002Fon\u002Fmagic-link","families\u002Fon\u002Fmagic-link",{"title":309,"path":310,"stem":311,"access":12},"oidc","\u002Ffamilies\u002Fon\u002Foidc","families\u002Fon\u002Foidc",{"title":313,"path":314,"stem":315,"access":12},"password","\u002Ffamilies\u002Fon\u002Fpassword","families\u002Fon\u002Fpassword",{"title":317,"path":318,"stem":319,"access":12},"pin","\u002Ffamilies\u002Fon\u002Fpin","families\u002Fon\u002Fpin",{"title":321,"path":322,"stem":323,"access":12},"recovery","\u002Ffamilies\u002Fon\u002Frecovery","families\u002Fon\u002Frecovery",{"title":325,"path":326,"stem":327,"access":12},"shamir","\u002Ffamilies\u002Fon\u002Fshamir","families\u002Fon\u002Fshamir",{"title":329,"path":330,"stem":331,"access":12},"threat","\u002Ffamilies\u002Fon\u002Fthreat","families\u002Fon\u002Fthreat",{"title":333,"path":334,"stem":335,"access":12},"totp","\u002Ffamilies\u002Fon\u002Ftotp","families\u002Fon\u002Ftotp",{"title":337,"path":338,"stem":339,"access":12},"webauthn","\u002Ffamilies\u002Fon\u002Fwebauthn","families\u002Fon\u002Fwebauthn",{"title":341,"path":342,"stem":343,"children":344,"access":12,"icon":127},"to-Stores","\u002Ffamilies\u002Fto","families\u002Fto\u002Findex",[345,346,350,353,357,361,365,370,374,378,382,386,390,394,398,402,406,410,414,417,421,425,429,434,438,442],{"title":341,"path":342,"stem":343,"access":12,"icon":127},{"title":347,"path":348,"stem":349,"access":12},"aws-dynamo","\u002Ffamilies\u002Fto\u002Faws-dynamo","families\u002Fto\u002Faws-dynamo",{"title":129,"path":351,"stem":352,"access":12},"\u002Ffamilies\u002Fto\u002Faws-s3","families\u002Fto\u002Faws-s3",{"title":354,"path":355,"stem":356,"access":12},"browser-fs","\u002Ffamilies\u002Fto\u002Fbrowser-fs","families\u002Fto\u002Fbrowser-fs",{"title":358,"path":359,"stem":360,"access":12},"browser-idb","\u002Ffamilies\u002Fto\u002Fbrowser-idb","families\u002Fto\u002Fbrowser-idb",{"title":362,"path":363,"stem":364,"access":12},"browser-local","\u002Ffamilies\u002Fto\u002Fbrowser-local","families\u002Fto\u002Fbrowser-local",{"title":366,"path":367,"stem":368,"access":12,"icon":369},"Choosing a store","\u002Ffamilies\u002Fto\u002Fchoosing-a-store","families\u002Fto\u002Fchoosing-a-store","i-lucide-split",{"title":371,"path":372,"stem":373,"access":12},"cloudflare-d1","\u002Ffamilies\u002Fto\u002Fcloudflare-d1","families\u002Fto\u002Fcloudflare-d1",{"title":375,"path":376,"stem":377,"access":12},"cloudflare-r2","\u002Ffamilies\u002Fto\u002Fcloudflare-r2","families\u002Fto\u002Fcloudflare-r2",{"title":379,"path":380,"stem":381,"access":12},"drive","\u002Ffamilies\u002Fto\u002Fdrive","families\u002Fto\u002Fdrive",{"title":383,"path":384,"stem":385,"access":12},"file","\u002Ffamilies\u002Fto\u002Ffile","families\u002Fto\u002Ffile",{"title":387,"path":388,"stem":389,"access":12},"icloud","\u002Ffamilies\u002Fto\u002Ficloud","families\u002Fto\u002Ficloud",{"title":391,"path":392,"stem":393,"access":12},"memory","\u002Ffamilies\u002Fto\u002Fmemory","families\u002Fto\u002Fmemory",{"title":395,"path":396,"stem":397,"access":12},"meter","\u002Ffamilies\u002Fto\u002Fmeter","families\u002Fto\u002Fmeter",{"title":399,"path":400,"stem":401,"access":12},"mysql","\u002Ffamilies\u002Fto\u002Fmysql","families\u002Fto\u002Fmysql",{"title":403,"path":404,"stem":405,"access":12},"nfs","\u002Ffamilies\u002Fto\u002Fnfs","families\u002Fto\u002Fnfs",{"title":407,"path":408,"stem":409,"access":12},"postgres","\u002Ffamilies\u002Fto\u002Fpostgres","families\u002Fto\u002Fpostgres",{"title":411,"path":412,"stem":413,"access":12},"probe","\u002Ffamilies\u002Fto\u002Fprobe","families\u002Fto\u002Fprobe",{"title":263,"path":415,"stem":416,"access":12},"\u002Ffamilies\u002Fto\u002Frest","families\u002Fto\u002Frest",{"title":418,"path":419,"stem":420,"access":12},"smb","\u002Ffamilies\u002Fto\u002Fsmb","families\u002Fto\u002Fsmb",{"title":422,"path":423,"stem":424,"access":12},"sqlite","\u002Ffamilies\u002Fto\u002Fsqlite","families\u002Fto\u002Fsqlite",{"title":426,"path":427,"stem":428,"access":12},"ssh","\u002Ffamilies\u002Fto\u002Fssh","families\u002Fto\u002Fssh",{"title":430,"path":431,"stem":432,"access":12,"icon":433},"Store-locator descriptors","\u002Ffamilies\u002Fto\u002Fstore-locator","families\u002Fto\u002Fstore-locator","i-lucide-map-pin",{"title":435,"path":436,"stem":437,"access":12},"supabase","\u002Ffamilies\u002Fto\u002Fsupabase","families\u002Fto\u002Fsupabase",{"title":439,"path":440,"stem":441,"access":12},"turso","\u002Ffamilies\u002Fto\u002Fturso","families\u002Fto\u002Fturso",{"title":443,"path":444,"stem":445,"access":12},"webdav","\u002Ffamilies\u002Fto\u002Fwebdav","families\u002Fto\u002Fwebdav",{"title":447,"path":448,"stem":449,"children":450},"Faq","\u002Ffaq","faq",[451,454,458,462,466,470],{"title":10,"path":448,"stem":452,"access":12,"icon":453},"faq\u002Findex","i-lucide-circle-help",{"title":455,"path":456,"stem":457,"access":12},"Where can noy-db run?","\u002Ffaq\u002Fwhere-can-noy-db-run","faq\u002F1.where-can-noy-db-run",{"title":459,"path":460,"stem":461,"access":12},"Native mobile & PWA","\u002Ffaq\u002Fmobile-and-pwa","faq\u002F2.mobile-and-pwa",{"title":463,"path":464,"stem":465,"access":12},"Threat model","\u002Ffaq\u002Fthreat-model","faq\u002F3.threat-model",{"title":467,"path":468,"stem":469,"access":12},"Community & ecosystem","\u002Ffaq\u002Fcommunity-and-ecosystem","faq\u002F4.community-and-ecosystem",{"title":471,"path":472,"stem":473,"access":12},"Licensing","\u002Ffaq\u002Flicensing","faq\u002F5.licensing",{"title":475,"path":476,"stem":477,"children":478},"Glossary","\u002Fglossary","glossary",[479,482,486,490,494],{"title":10,"path":476,"stem":480,"access":12,"icon":481},"glossary\u002Findex","i-lucide-book-a",{"title":483,"path":484,"stem":485,"access":12},"Core vocabulary","\u002Fglossary\u002Fcore-vocabulary","glossary\u002Fcore-vocabulary",{"title":487,"path":488,"stem":489,"access":12},"Deletion vocabulary","\u002Fglossary\u002Fdeletion","glossary\u002Fdeletion",{"title":491,"path":492,"stem":493,"access":12},"Satellite collection vocabulary","\u002Fglossary\u002Fsatellite-collections","glossary\u002Fsatellite-collections",{"title":495,"path":496,"stem":497,"access":12},"Schema migration vocabulary","\u002Fglossary\u002Fschema-migration","glossary\u002Fschema-migration",{"title":499,"path":500,"stem":501,"children":502},"Recipes","\u002Frecipes","recipes",[503,506,510,514,518,522,526,530,534,538,542,546,550,554,558,562,567,571,575,580,584,588,592],{"title":10,"path":500,"stem":504,"access":12,"icon":505},"recipes\u002Findex","i-lucide-play",{"title":507,"path":508,"stem":509,"access":12},"Accounting app","\u002Frecipes\u002Faccounting-app","recipes\u002Faccounting-app",{"title":511,"path":512,"stem":513,"access":12},"Analytics app","\u002Frecipes\u002Fanalytics-app","recipes\u002Fanalytics-app",{"title":515,"path":516,"stem":517,"access":12},"Attestation verifier","\u002Frecipes\u002Fattestation-verifier","recipes\u002Fattestation-verifier",{"title":519,"path":520,"stem":521,"access":12},"AWS-KMS attestation","\u002Frecipes\u002Faws-kms-pdf-attestation","recipes\u002Faws-kms-pdf-attestation",{"title":523,"path":524,"stem":525,"access":12},"Browser durability","\u002Frecipes\u002Fbrowser-durability","recipes\u002Fbrowser-durability",{"title":527,"path":528,"stem":529,"access":12},"Production cloud store","\u002Frecipes\u002Fcloud-store","recipes\u002Fcloud-store",{"title":531,"path":532,"stem":533,"access":12},"Compose your own setup","\u002Frecipes\u002Fcompose-your-own","recipes\u002Fcompose-your-own",{"title":535,"path":536,"stem":537,"access":12},"Confidential HR records","\u002Frecipes\u002Fconfidential-hr","recipes\u002Fconfidential-hr",{"title":539,"path":540,"stem":541,"access":12},"Composing an echo secret","\u002Frecipes\u002Fecho-secret-enrollment","recipes\u002Fecho-secret-enrollment",{"title":543,"path":544,"stem":545,"access":12},"Email archive","\u002Frecipes\u002Femail-archive","recipes\u002Femail-archive",{"title":547,"path":548,"stem":549,"access":12},"Email archive — threads & revisions","\u002Frecipes\u002Femail-archive-threads-revisions","recipes\u002Femail-archive-threads-revisions",{"title":551,"path":552,"stem":553,"access":12},"Export & portability","\u002Frecipes\u002Fexport-portability","recipes\u002Fexport-portability",{"title":555,"path":556,"stem":557,"access":12},"Passwordless OIDC (AWS Cognito)","\u002Frecipes\u002Fpasswordless-oidc","recipes\u002Fpasswordless-oidc",{"title":559,"path":560,"stem":561,"access":12},"Personal notebook","\u002Frecipes\u002Fpersonal-notebook","recipes\u002Fpersonal-notebook",{"title":563,"path":564,"stem":565,"access":12,"icon":566},"Playgrounds","\u002Frecipes\u002Fplaygrounds","recipes\u002Fplaygrounds","i-lucide-gamepad-2",{"title":568,"path":569,"stem":570,"access":12},"React invoice app","\u002Frecipes\u002Freact-invoices","recipes\u002Freact-invoices",{"title":572,"path":573,"stem":574,"access":12},"Collaborative app","\u002Frecipes\u002Frealtime-crdt-app","recipes\u002Frealtime-crdt-app",{"title":576,"path":577,"stem":578,"access":12,"icon":579},"Run the showcases","\u002Frecipes\u002Frun-the-showcases","recipes\u002Frun-the-showcases","i-lucide-flask-conical",{"title":581,"path":582,"stem":583,"access":12},"Search & RAG","\u002Frecipes\u002Fsearch-rag","recipes\u002Fsearch-rag",{"title":585,"path":586,"stem":587,"access":12},"Team vault topology","\u002Frecipes\u002Fteam-vault-topology","recipes\u002Fteam-vault-topology",{"title":589,"path":590,"stem":591,"access":12},"Unlock ceremonies","\u002Frecipes\u002Funlock-ceremonies","recipes\u002Funlock-ceremonies",{"title":593,"path":594,"stem":595,"access":12},"User preferences","\u002Frecipes\u002Fuser-preferences","recipes\u002Fuser-preferences",{"title":597,"path":598,"stem":599,"children":600},"Services","\u002Fservices","services",[601,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,710,714,718,722,726,730,734,738,742,746,750,755,759,763,767,771,775,779,783,787,791,795,799,803,807,811,815,819,823,827,831,835,839,843,847,851,855,859,863,867,871,875,879,883,887,891,895,899],{"title":10,"path":598,"stem":602,"access":12,"icon":603},"services\u002Findex","i-lucide-layers",{"title":605,"path":606,"stem":607,"access":12},"archive","\u002Fservices\u002Farchive","services\u002Farchive",{"title":609,"path":610,"stem":611,"access":12},"attestation","\u002Fservices\u002Fattestation","services\u002Fattestation",{"title":613,"path":614,"stem":615,"access":12},"auth-introspection","\u002Fservices\u002Fauth-introspection","services\u002Fauth-introspection",{"title":617,"path":618,"stem":619,"access":12},"auth-landscape","\u002Fservices\u002Fauth-landscape","services\u002Fauth-landscape",{"title":621,"path":622,"stem":623,"access":12},"blobs","\u002Fservices\u002Fblobs","services\u002Fblobs",{"title":625,"path":626,"stem":627,"access":12},"broker","\u002Fservices\u002Fbroker","services\u002Fbroker",{"title":629,"path":630,"stem":631,"access":12},"bundle","\u002Fservices\u002Fbundle","services\u002Fbundle",{"title":633,"path":634,"stem":635,"access":12},"classified","\u002Fservices\u002Fclassified","services\u002Fclassified",{"title":637,"path":638,"stem":639,"access":12},"computed","\u002Fservices\u002Fcomputed","services\u002Fcomputed",{"title":641,"path":642,"stem":643,"access":12},"consent","\u002Fservices\u002Fconsent","services\u002Fconsent",{"title":645,"path":646,"stem":647,"access":12},"cover","\u002Fservices\u002Fcover","services\u002Fcover",{"title":649,"path":650,"stem":651,"access":12},"coverage","\u002Fservices\u002Fcoverage","services\u002Fcoverage",{"title":653,"path":654,"stem":655,"access":12},"crdt","\u002Fservices\u002Fcrdt","services\u002Fcrdt",{"title":657,"path":658,"stem":659,"access":12},"cross-join","\u002Fservices\u002Fcross-join","services\u002Fcross-join",{"title":661,"path":662,"stem":663,"access":12},"custody","\u002Fservices\u002Fcustody","services\u002Fcustody",{"title":665,"path":666,"stem":667,"access":12},"derivations","\u002Fservices\u002Fderivations","services\u002Fderivations",{"title":669,"path":670,"stem":671,"access":12},"directory","\u002Fservices\u002Fdirectory","services\u002Fdirectory",{"title":673,"path":674,"stem":675,"access":12},"search — AI","\u002Fservices\u002Fembeddings","services\u002Fembeddings",{"title":677,"path":678,"stem":679,"access":12},"Field metadata","\u002Fservices\u002Ffield-metadata","services\u002Ffield-metadata",{"title":681,"path":682,"stem":683,"access":12},"Foreign refs","\u002Fservices\u002Fforeign-refs","services\u002Fforeign-refs",{"title":685,"path":686,"stem":687,"access":12},"forget","\u002Fservices\u002Fforget","services\u002Fforget",{"title":689,"path":690,"stem":691,"access":12},"governance","\u002Fservices\u002Fgovernance","services\u002Fgovernance",{"title":693,"path":694,"stem":695,"access":12},"guards","\u002Fservices\u002Fguards","services\u002Fguards",{"title":697,"path":698,"stem":699,"access":12},"history","\u002Fservices\u002Fhistory","services\u002Fhistory",{"title":701,"path":702,"stem":703,"access":12},"i18n","\u002Fservices\u002Fi18n","services\u002Fi18n",{"title":705,"path":706,"stem":707,"children":708,"access":12},"indexing","\u002Fservices\u002Findexing","services\u002Findexing",[709],{"title":705,"path":706,"stem":707,"access":12},{"title":711,"path":712,"stem":713,"access":12},"introspection","\u002Fservices\u002Fintrospection","services\u002Fintrospection",{"title":715,"path":716,"stem":717,"access":12},"joins","\u002Fservices\u002Fjoins","services\u002Fjoins",{"title":719,"path":720,"stem":721,"access":12},"lazy","\u002Fservices\u002Flazy","services\u002Flazy",{"title":723,"path":724,"stem":725,"access":12},"links","\u002Fservices\u002Flinks","services\u002Flinks",{"title":727,"path":728,"stem":729,"access":12},"live","\u002Fservices\u002Flive","services\u002Flive",{"title":731,"path":732,"stem":733,"access":12},"lookup","\u002Fservices\u002Flookup","services\u002Flookup",{"title":735,"path":736,"stem":737,"access":12},"manifest","\u002Fservices\u002Fmanifest","services\u002Fmanifest",{"title":739,"path":740,"stem":741,"access":12},"materialized-views","\u002Fservices\u002Fmaterialized-views","services\u002Fmaterialized-views",{"title":743,"path":744,"stem":745,"access":12},"Metadata ladder","\u002Fservices\u002Fmetadata-ladder","services\u002Fmetadata-ladder",{"title":747,"path":748,"stem":749,"access":12},"Metadata riders","\u002Fservices\u002Fmetadata-riders","services\u002Fmetadata-riders",{"title":751,"path":752,"stem":753,"access":12,"badge":754},"metrics","\u002Fservices\u002Fmetrics","services\u002Fmetrics","Planned",{"title":756,"path":757,"stem":758,"access":12,"badge":754},"migrations","\u002Fservices\u002Fmigrations","services\u002Fmigrations",{"title":760,"path":761,"stem":762,"access":12},"money","\u002Fservices\u002Fmoney","services\u002Fmoney",{"title":764,"path":765,"stem":766,"access":12},"numbering","\u002Fservices\u002Fnumbering","services\u002Fnumbering",{"title":768,"path":769,"stem":770,"access":12},"overlay-views","\u002Fservices\u002Foverlay-views","services\u002Foverlay-views",{"title":772,"path":773,"stem":774,"access":12,"badge":754},"partitioning","\u002Fservices\u002Fpartitioning","services\u002Fpartitioning",{"title":776,"path":777,"stem":778,"access":12},"periods","\u002Fservices\u002Fperiods","services\u002Fperiods",{"title":780,"path":781,"stem":782,"access":12},"persisted-schemas","\u002Fservices\u002Fpersisted-schemas","services\u002Fpersisted-schemas",{"title":784,"path":785,"stem":786,"access":12},"plaintext-bypass","\u002Fservices\u002Fplaintext-bypass","services\u002Fplaintext-bypass",{"title":788,"path":789,"stem":790,"access":12},"pod-redirect","\u002Fservices\u002Fpod-redirect","services\u002Fpod-redirect",{"title":792,"path":793,"stem":794,"access":12},"pod-signature","\u002Fservices\u002Fpod-signature","services\u002Fpod-signature",{"title":796,"path":797,"stem":798,"access":12},"policy","\u002Fservices\u002Fpolicy","services\u002Fpolicy",{"title":800,"path":801,"stem":802,"access":12},"portability","\u002Fservices\u002Fportability","services\u002Fportability",{"title":804,"path":805,"stem":806,"access":12},"reduce","\u002Fservices\u002Freduce","services\u002Freduce",{"title":808,"path":809,"stem":810,"access":12},"routing","\u002Fservices\u002Frouting","services\u002Frouting",{"title":812,"path":813,"stem":814,"access":12},"satellites","\u002Fservices\u002Fsatellites","services\u002Fsatellites",{"title":816,"path":817,"stem":818,"access":12},"schema-identifiers","\u002Fservices\u002Fschema-identifiers","services\u002Fschema-identifiers",{"title":820,"path":821,"stem":822,"access":12},"schema-update","\u002Fservices\u002Fschema-update","services\u002Fschema-update",{"title":824,"path":825,"stem":826,"access":12},"sealed-record","\u002Fservices\u002Fsealed-record","services\u002Fsealed-record",{"title":828,"path":829,"stem":830,"access":12},"sealing provider id","\u002Fservices\u002Fsealing-pid-stability","services\u002Fsealing-pid-stability",{"title":832,"path":833,"stem":834,"access":12},"search — full-text","\u002Fservices\u002Fsearch","services\u002Fsearch",{"title":836,"path":837,"stem":838,"access":12},"sequence","\u002Fservices\u002Fsequence","services\u002Fsequence",{"title":840,"path":841,"stem":842,"access":12},"session","\u002Fservices\u002Fsession","services\u002Fsession",{"title":844,"path":845,"stem":846,"access":12},"session-tiers","\u002Fservices\u002Fsession-tiers","services\u002Fsession-tiers",{"title":848,"path":849,"stem":850,"access":12},"shadow","\u002Fservices\u002Fshadow","services\u002Fshadow",{"title":852,"path":853,"stem":854,"access":12},"share-link","\u002Fservices\u002Fshare-link","services\u002Fshare-link",{"title":856,"path":857,"stem":858,"access":12},"snapshots","\u002Fservices\u002Fsnapshots","services\u002Fsnapshots",{"title":860,"path":861,"stem":862,"access":12},"store capabilities","\u002Fservices\u002Fstorage-capability-matrix","services\u002Fstorage-capability-matrix",{"title":864,"path":865,"stem":866,"access":12},"sync","\u002Fservices\u002Fsync","services\u002Fsync",{"title":868,"path":869,"stem":870,"access":12},"team","\u002Fservices\u002Fteam","services\u002Fteam",{"title":872,"path":873,"stem":874,"access":12},"tiers","\u002Fservices\u002Ftiers","services\u002Ftiers",{"title":876,"path":877,"stem":878,"access":12},"transactions","\u002Fservices\u002Ftransactions","services\u002Ftransactions",{"title":880,"path":881,"stem":882,"access":12},"partitions","\u002Fservices\u002Ftransferable-partitions","services\u002Ftransferable-partitions",{"title":884,"path":885,"stem":886,"access":12},"user-envelope","\u002Fservices\u002Fuser-envelope","services\u002Fuser-envelope",{"title":888,"path":889,"stem":890,"access":12,"badge":754},"validation","\u002Fservices\u002Fvalidation","services\u002Fvalidation",{"title":892,"path":893,"stem":894,"access":12},"vault-head","\u002Fservices\u002Fvault-head","services\u002Fvault-head",{"title":896,"path":897,"stem":898,"access":12},"via","\u002Fservices\u002Fvia","services\u002Fvia",{"title":900,"path":901,"stem":902,"access":12},"withdrawal","\u002Fservices\u002Fwithdrawal","services\u002Fwithdrawal",{"title":904,"path":905,"stem":906,"children":907},"Start","\u002Fstart","start",[908,911,915,919,923],{"title":10,"path":905,"stem":909,"access":12,"icon":910},"start\u002Findex","i-lucide-flag",{"title":912,"path":913,"stem":914,"access":12},"Install","\u002Fstart\u002Finstall","start\u002F1.install",{"title":916,"path":917,"stem":918,"access":12},"Your first vault","\u002Fstart\u002Ffirst-vault","start\u002F2.first-vault",{"title":920,"path":921,"stem":922,"access":12},"Your first service","\u002Fstart\u002Ffirst-service","start\u002F3.first-service",{"title":924,"path":925,"stem":926,"access":12},"See the ciphertext","\u002Fstart\u002Fsee-the-ciphertext","start\u002F4.see-the-ciphertext",{"id":928,"title":609,"access":12,"apiToc":929,"body":930,"category":2995,"description":2996,"extension":2997,"meta":2998,"navigation":2995,"nest":2999,"path":610,"seo":3000,"sinceVersion":2995,"status":3001,"stem":611,"subtitle":2995,"tier":3002,"tocExternal":2995,"__hash__":3003},"docs\u002Fservices\u002Fattestation.md",false,{"type":931,"value":932,"toc":2974},"minimark",[933,936,940,945,972,995,999,1021,1025,1040,1497,1517,1521,1526,1694,1701,1732,1736,1742,1883,2058,2091,2095,2102,2166,2276,2282,2401,2407,2411,2419,2544,2549,2565,2570,2573,2666,2670,2676,2771,2775,2804,2823,2827,2839,2843,2923,2927,2970],[934,935,609],"h1",{"id":609},[937,938],"service-meta",{":rows":939},"[{\"label\":\"Subpath\",\"value\":\"`@noy-db\u002Fhub\u002Fattestation`\"},{\"label\":\"Factory\",\"value\":\"`withAttestation()`\"},{\"label\":\"Layer\",\"value\":\"`with-audit`\"}]",[941,942,944],"h2",{"id":943},"what-it-does","What it does",[946,947,948,949,953,954,958,959,962,963,967,968,971],"p",{},"Attestation lets a vault owner prove that a document — an invoice, a certificate, a\nreceipt — is authentic and unaltered, without running a verification server and without\nrevealing the vault's data. A ",[950,951,952],"strong",{},"vault"," is noy-db's end-to-end-encrypted document store\n(see ",[955,956,957],"a",{"href":48},"Vaults & collections","); this service adds an\n",[950,960,961],{},"issue side"," to it: ",[964,965,966],"code",{},"vault.issueAttestation()"," mints a ",[950,969,970],{},"per-field commitment"," — one\nsalted SHA-256 hash per declared field, so each hash proves a value without revealing\nit — signs the set with the vault's Ed25519 document-signing key, and packs the result\ninto a compact string you render as a QR code on the document itself.",[946,973,974,975,978,979,982,983,986,987,990,991,994],{},"The ",[950,976,977],{},"verify side"," is the standalone, dependency-free ",[964,980,981],{},"@noy-db\u002Fattestation"," package:\nanyone holding the paper recomputes the hashes from the values they can read off it and\nchecks the signature against the issuer's published public key — fully offline, no\nnoy-db, no network. The service also maintains a revocation set (",[964,984,985],{},"revokeAttestation"," \u002F\n",[964,988,989],{},"unrevokeAttestation",") and can publish it as a signed ",[950,992,993],{},"revocation list"," verifiers can\ncheck against. Like every opt-in service, the issue\u002Frevoke engines are dynamically\nimported and stay out of your bundle until you opt in.",[941,996,998],{"id":997},"prerequisites","Prerequisites",[1000,1001,1002,1012],"ul",{},[1003,1004,1005,1011],"li",{},[950,1006,1007,1008,1010],{},"An ",[964,1009,609],{}," schema on the collection"," — the issuer side signs only fields the collection-level schema declares.",[1003,1013,1014,1017,1018,1020],{},[950,1015,1016],{},"A published Ed25519 public key"," — verifiers check signatures against it, so you must publish it somewhere verifiers can fetch out-of-band (a well-known URL, a QR poster). The verifying party itself needs none of this page: only the zero-dependency ",[964,1019,981],{}," package, the field schema, and that key.",[941,1022,1024],{"id":1023},"opt-in","Opt in",[946,1026,1027,1028,1031,1032,1036,1037,1039],{},"Pass the factory to ",[964,1029,1030],{},"createNoydb",", then declare ",[1033,1034,1035],"em",{},"which fields"," are attestable per\ncollection with the ",[964,1038,609],{}," option:",[1041,1042,1047],"pre",{"className":1043,"code":1044,"language":1045,"meta":1046,"style":1046},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { createNoydb } from '@noy-db\u002Fhub'\nimport { withAttestation } from '@noy-db\u002Fhub\u002Fattestation'\n\ninterface Invoice { id: string; invoiceNo: string; total: number; issueDate: string }\n\nconst attestation = {\n  fields: [\n    { path: 'invoiceNo', normalize: 'alnum-upper' as const },\n    { path: 'total',     normalize: 'cents'       as const },\n    { path: 'issueDate', normalize: 'iso-date'    as const },\n  ],\n}\n\nconst db = await createNoydb({\n  user: 'firm',                            \u002F\u002F omitting `store` uses the built-in in-memory store;\n  secret: 'firm-secret-2026',          \u002F\u002F pass to-file \u002F to-postgres \u002F … in production\n  attestationStrategy: withAttestation(),\n})\nconst vault = await db.openVault('books')\nconst invoices = vault.collection\u003CInvoice>('invoices', { attestation })\n","ts","",[964,1048,1049,1082,1103,1110,1165,1170,1185,1196,1239,1276,1312,1321,1327,1332,1354,1375,1395,1410,1419,1451],{"__ignoreMap":1046},[1050,1051,1054,1058,1062,1066,1069,1072,1075,1079],"span",{"class":1052,"line":1053},"line",1,[1050,1055,1057],{"class":1056},"s7zQu","import",[1050,1059,1061],{"class":1060},"sMK4o"," {",[1050,1063,1065],{"class":1064},"sTEyZ"," createNoydb",[1050,1067,1068],{"class":1060}," }",[1050,1070,1071],{"class":1056}," from",[1050,1073,1074],{"class":1060}," '",[1050,1076,1078],{"class":1077},"sfazB","@noy-db\u002Fhub",[1050,1080,1081],{"class":1060},"'\n",[1050,1083,1085,1087,1089,1092,1094,1096,1098,1101],{"class":1052,"line":1084},2,[1050,1086,1057],{"class":1056},[1050,1088,1061],{"class":1060},[1050,1090,1091],{"class":1064}," withAttestation",[1050,1093,1068],{"class":1060},[1050,1095,1071],{"class":1056},[1050,1097,1074],{"class":1060},[1050,1099,1100],{"class":1077},"@noy-db\u002Fhub\u002Fattestation",[1050,1102,1081],{"class":1060},[1050,1104,1106],{"class":1052,"line":1105},3,[1050,1107,1109],{"emptyLinePlaceholder":1108},true,"\n",[1050,1111,1113,1117,1121,1123,1127,1130,1133,1136,1139,1141,1143,1145,1148,1150,1153,1155,1158,1160,1162],{"class":1052,"line":1112},4,[1050,1114,1116],{"class":1115},"spNyl","interface",[1050,1118,1120],{"class":1119},"sBMFI"," Invoice",[1050,1122,1061],{"class":1060},[1050,1124,1126],{"class":1125},"swJcz"," id",[1050,1128,1129],{"class":1060},":",[1050,1131,1132],{"class":1119}," string",[1050,1134,1135],{"class":1060},";",[1050,1137,1138],{"class":1125}," invoiceNo",[1050,1140,1129],{"class":1060},[1050,1142,1132],{"class":1119},[1050,1144,1135],{"class":1060},[1050,1146,1147],{"class":1125}," total",[1050,1149,1129],{"class":1060},[1050,1151,1152],{"class":1119}," number",[1050,1154,1135],{"class":1060},[1050,1156,1157],{"class":1125}," issueDate",[1050,1159,1129],{"class":1060},[1050,1161,1132],{"class":1119},[1050,1163,1164],{"class":1060}," }\n",[1050,1166,1168],{"class":1052,"line":1167},5,[1050,1169,1109],{"emptyLinePlaceholder":1108},[1050,1171,1173,1176,1179,1182],{"class":1052,"line":1172},6,[1050,1174,1175],{"class":1115},"const",[1050,1177,1178],{"class":1064}," attestation ",[1050,1180,1181],{"class":1060},"=",[1050,1183,1184],{"class":1060}," {\n",[1050,1186,1188,1191,1193],{"class":1052,"line":1187},7,[1050,1189,1190],{"class":1125},"  fields",[1050,1192,1129],{"class":1060},[1050,1194,1195],{"class":1064}," [\n",[1050,1197,1199,1202,1205,1207,1209,1212,1215,1218,1221,1223,1225,1228,1230,1233,1236],{"class":1052,"line":1198},8,[1050,1200,1201],{"class":1060},"    {",[1050,1203,1204],{"class":1125}," path",[1050,1206,1129],{"class":1060},[1050,1208,1074],{"class":1060},[1050,1210,1211],{"class":1077},"invoiceNo",[1050,1213,1214],{"class":1060},"'",[1050,1216,1217],{"class":1060},",",[1050,1219,1220],{"class":1125}," normalize",[1050,1222,1129],{"class":1060},[1050,1224,1074],{"class":1060},[1050,1226,1227],{"class":1077},"alnum-upper",[1050,1229,1214],{"class":1060},[1050,1231,1232],{"class":1056}," as",[1050,1234,1235],{"class":1115}," const",[1050,1237,1238],{"class":1060}," },\n",[1050,1240,1242,1244,1246,1248,1250,1253,1255,1257,1260,1262,1264,1267,1269,1272,1274],{"class":1052,"line":1241},9,[1050,1243,1201],{"class":1060},[1050,1245,1204],{"class":1125},[1050,1247,1129],{"class":1060},[1050,1249,1074],{"class":1060},[1050,1251,1252],{"class":1077},"total",[1050,1254,1214],{"class":1060},[1050,1256,1217],{"class":1060},[1050,1258,1259],{"class":1125},"     normalize",[1050,1261,1129],{"class":1060},[1050,1263,1074],{"class":1060},[1050,1265,1266],{"class":1077},"cents",[1050,1268,1214],{"class":1060},[1050,1270,1271],{"class":1056},"       as",[1050,1273,1235],{"class":1115},[1050,1275,1238],{"class":1060},[1050,1277,1279,1281,1283,1285,1287,1290,1292,1294,1296,1298,1300,1303,1305,1308,1310],{"class":1052,"line":1278},10,[1050,1280,1201],{"class":1060},[1050,1282,1204],{"class":1125},[1050,1284,1129],{"class":1060},[1050,1286,1074],{"class":1060},[1050,1288,1289],{"class":1077},"issueDate",[1050,1291,1214],{"class":1060},[1050,1293,1217],{"class":1060},[1050,1295,1220],{"class":1125},[1050,1297,1129],{"class":1060},[1050,1299,1074],{"class":1060},[1050,1301,1302],{"class":1077},"iso-date",[1050,1304,1214],{"class":1060},[1050,1306,1307],{"class":1056},"    as",[1050,1309,1235],{"class":1115},[1050,1311,1238],{"class":1060},[1050,1313,1315,1318],{"class":1052,"line":1314},11,[1050,1316,1317],{"class":1064},"  ]",[1050,1319,1320],{"class":1060},",\n",[1050,1322,1324],{"class":1052,"line":1323},12,[1050,1325,1326],{"class":1060},"}\n",[1050,1328,1330],{"class":1052,"line":1329},13,[1050,1331,1109],{"emptyLinePlaceholder":1108},[1050,1333,1335,1337,1340,1342,1345,1348,1351],{"class":1052,"line":1334},14,[1050,1336,1175],{"class":1115},[1050,1338,1339],{"class":1064}," db ",[1050,1341,1181],{"class":1060},[1050,1343,1344],{"class":1056}," await",[1050,1346,1065],{"class":1347},"s2Zo4",[1050,1349,1350],{"class":1064},"(",[1050,1352,1353],{"class":1060},"{\n",[1050,1355,1357,1360,1362,1364,1367,1369,1371],{"class":1052,"line":1356},15,[1050,1358,1359],{"class":1125},"  user",[1050,1361,1129],{"class":1060},[1050,1363,1074],{"class":1060},[1050,1365,1366],{"class":1077},"firm",[1050,1368,1214],{"class":1060},[1050,1370,1217],{"class":1060},[1050,1372,1374],{"class":1373},"sHwdD","                            \u002F\u002F omitting `store` uses the built-in in-memory store;\n",[1050,1376,1378,1381,1383,1385,1388,1390,1392],{"class":1052,"line":1377},16,[1050,1379,1380],{"class":1125},"  secret",[1050,1382,1129],{"class":1060},[1050,1384,1074],{"class":1060},[1050,1386,1387],{"class":1077},"firm-secret-2026",[1050,1389,1214],{"class":1060},[1050,1391,1217],{"class":1060},[1050,1393,1394],{"class":1373},"          \u002F\u002F pass to-file \u002F to-postgres \u002F … in production\n",[1050,1396,1398,1401,1403,1405,1408],{"class":1052,"line":1397},17,[1050,1399,1400],{"class":1125},"  attestationStrategy",[1050,1402,1129],{"class":1060},[1050,1404,1091],{"class":1347},[1050,1406,1407],{"class":1064},"()",[1050,1409,1320],{"class":1060},[1050,1411,1413,1416],{"class":1052,"line":1412},18,[1050,1414,1415],{"class":1060},"}",[1050,1417,1418],{"class":1064},")\n",[1050,1420,1422,1424,1427,1429,1431,1434,1437,1440,1442,1444,1447,1449],{"class":1052,"line":1421},19,[1050,1423,1175],{"class":1115},[1050,1425,1426],{"class":1064}," vault ",[1050,1428,1181],{"class":1060},[1050,1430,1344],{"class":1056},[1050,1432,1433],{"class":1064}," db",[1050,1435,1436],{"class":1060},".",[1050,1438,1439],{"class":1347},"openVault",[1050,1441,1350],{"class":1064},[1050,1443,1214],{"class":1060},[1050,1445,1446],{"class":1077},"books",[1050,1448,1214],{"class":1060},[1050,1450,1418],{"class":1064},[1050,1452,1454,1456,1459,1461,1464,1466,1469,1472,1475,1478,1480,1482,1485,1487,1489,1491,1493,1495],{"class":1052,"line":1453},20,[1050,1455,1175],{"class":1115},[1050,1457,1458],{"class":1064}," invoices ",[1050,1460,1181],{"class":1060},[1050,1462,1463],{"class":1064}," vault",[1050,1465,1436],{"class":1060},[1050,1467,1468],{"class":1347},"collection",[1050,1470,1471],{"class":1060},"\u003C",[1050,1473,1474],{"class":1119},"Invoice",[1050,1476,1477],{"class":1060},">",[1050,1479,1350],{"class":1064},[1050,1481,1214],{"class":1060},[1050,1483,1484],{"class":1077},"invoices",[1050,1486,1214],{"class":1060},[1050,1488,1217],{"class":1060},[1050,1490,1061],{"class":1060},[1050,1492,1178],{"class":1064},[1050,1494,1415],{"class":1060},[1050,1496,1418],{"class":1064},[946,1498,1499,1500,1503,1504,1507,1508,1511,1512,1516],{},"Each field spec pairs a dot-path with a ",[950,1501,1502],{},"normalizer"," — a canonicalization rule applied\nidentically on issue and on verify, so the human-typed ",[964,1505,1506],{},"\"1,234.50\""," later matches the\nstored number ",[964,1509,1510],{},"1234.5"," (see the ",[955,1513,1515],{"href":1514},"#normalize","normalizer table",").",[941,1518,1520],{"id":1519},"usage","Usage",[1522,1523,1525],"h3",{"id":1524},"issue-a-qr-credential","Issue a QR credential",[1041,1527,1529],{"className":1043,"code":1528,"language":1045,"meta":1046,"style":1046},"await invoices.put('inv-1', {\n  id: 'inv-1', invoiceNo: 'INV-1042', total: 1234.5, issueDate: '2026-05-29',\n})\n\nconst { docId, qr, keyId, publicKeyB64 } = await vault.issueAttestation('invoices', 'inv-1')\n\u002F\u002F → docId       : '01JZK7Y1Q2M4N8R3T5V7X9ZABC'  — 26-char id of THIS attestation (used for revocation)\n\u002F\u002F → qr          : 'eyJ2IjoxLCJkb2NJZCI6...'     — base64url payload; render it as a QR on the document\n\u002F\u002F → keyId       : 'bd7e8268071ac41f'            — identifies the signing key\n\u002F\u002F → publicKeyB64: 'hpbs5UQivCLgPolFRoj5h1Q1…'   — the matching Ed25519 public key\n",[964,1530,1531,1557,1608,1614,1618,1674,1679,1684,1689],{"__ignoreMap":1046},[1050,1532,1533,1536,1539,1541,1544,1546,1548,1551,1553,1555],{"class":1052,"line":1053},[1050,1534,1535],{"class":1056},"await",[1050,1537,1538],{"class":1064}," invoices",[1050,1540,1436],{"class":1060},[1050,1542,1543],{"class":1347},"put",[1050,1545,1350],{"class":1064},[1050,1547,1214],{"class":1060},[1050,1549,1550],{"class":1077},"inv-1",[1050,1552,1214],{"class":1060},[1050,1554,1217],{"class":1060},[1050,1556,1184],{"class":1060},[1050,1558,1559,1562,1564,1566,1568,1570,1572,1574,1576,1578,1581,1583,1585,1587,1589,1593,1595,1597,1599,1601,1604,1606],{"class":1052,"line":1084},[1050,1560,1561],{"class":1125},"  id",[1050,1563,1129],{"class":1060},[1050,1565,1074],{"class":1060},[1050,1567,1550],{"class":1077},[1050,1569,1214],{"class":1060},[1050,1571,1217],{"class":1060},[1050,1573,1138],{"class":1125},[1050,1575,1129],{"class":1060},[1050,1577,1074],{"class":1060},[1050,1579,1580],{"class":1077},"INV-1042",[1050,1582,1214],{"class":1060},[1050,1584,1217],{"class":1060},[1050,1586,1147],{"class":1125},[1050,1588,1129],{"class":1060},[1050,1590,1592],{"class":1591},"sbssI"," 1234.5",[1050,1594,1217],{"class":1060},[1050,1596,1157],{"class":1125},[1050,1598,1129],{"class":1060},[1050,1600,1074],{"class":1060},[1050,1602,1603],{"class":1077},"2026-05-29",[1050,1605,1214],{"class":1060},[1050,1607,1320],{"class":1060},[1050,1609,1610,1612],{"class":1052,"line":1105},[1050,1611,1415],{"class":1060},[1050,1613,1418],{"class":1064},[1050,1615,1616],{"class":1052,"line":1112},[1050,1617,1109],{"emptyLinePlaceholder":1108},[1050,1619,1620,1622,1624,1627,1629,1632,1634,1637,1639,1642,1644,1647,1649,1651,1653,1656,1658,1660,1662,1664,1666,1668,1670,1672],{"class":1052,"line":1167},[1050,1621,1175],{"class":1115},[1050,1623,1061],{"class":1060},[1050,1625,1626],{"class":1064}," docId",[1050,1628,1217],{"class":1060},[1050,1630,1631],{"class":1064}," qr",[1050,1633,1217],{"class":1060},[1050,1635,1636],{"class":1064}," keyId",[1050,1638,1217],{"class":1060},[1050,1640,1641],{"class":1064}," publicKeyB64 ",[1050,1643,1415],{"class":1060},[1050,1645,1646],{"class":1060}," =",[1050,1648,1344],{"class":1056},[1050,1650,1463],{"class":1064},[1050,1652,1436],{"class":1060},[1050,1654,1655],{"class":1347},"issueAttestation",[1050,1657,1350],{"class":1064},[1050,1659,1214],{"class":1060},[1050,1661,1484],{"class":1077},[1050,1663,1214],{"class":1060},[1050,1665,1217],{"class":1060},[1050,1667,1074],{"class":1060},[1050,1669,1550],{"class":1077},[1050,1671,1214],{"class":1060},[1050,1673,1418],{"class":1064},[1050,1675,1676],{"class":1052,"line":1172},[1050,1677,1678],{"class":1373},"\u002F\u002F → docId       : '01JZK7Y1Q2M4N8R3T5V7X9ZABC'  — 26-char id of THIS attestation (used for revocation)\n",[1050,1680,1681],{"class":1052,"line":1187},[1050,1682,1683],{"class":1373},"\u002F\u002F → qr          : 'eyJ2IjoxLCJkb2NJZCI6...'     — base64url payload; render it as a QR on the document\n",[1050,1685,1686],{"class":1052,"line":1198},[1050,1687,1688],{"class":1373},"\u002F\u002F → keyId       : 'bd7e8268071ac41f'            — identifies the signing key\n",[1050,1690,1691],{"class":1052,"line":1241},[1050,1692,1693],{"class":1373},"\u002F\u002F → publicKeyB64: 'hpbs5UQivCLgPolFRoj5h1Q1…'   — the matching Ed25519 public key\n",[946,1695,1696,1697,1700],{},"The first issuance lazily mints the vault's Ed25519 document-signing keypair and\npersists it encrypted inside the vault; every later issuance reuses it, so ",[964,1698,1699],{},"keyId","\nstays stable. Publish the public key wherever verifiers can fetch it once (your\nwebsite, the verifier page itself):",[1041,1702,1704],{"className":1043,"code":1703,"language":1045,"meta":1046,"style":1046},"const pub = await vault.getDocumentSigningPublicKey()\n\u002F\u002F → { keyId: 'bd7e8268071ac41f', publicKeyB64: 'hpbs5UQivCLgPolFRoj5h1Q12OCXFlZkZfff-mEiAPM' }\n",[964,1705,1706,1727],{"__ignoreMap":1046},[1050,1707,1708,1710,1713,1715,1717,1719,1721,1724],{"class":1052,"line":1053},[1050,1709,1175],{"class":1115},[1050,1711,1712],{"class":1064}," pub ",[1050,1714,1181],{"class":1060},[1050,1716,1344],{"class":1056},[1050,1718,1463],{"class":1064},[1050,1720,1436],{"class":1060},[1050,1722,1723],{"class":1347},"getDocumentSigningPublicKey",[1050,1725,1726],{"class":1064},"()\n",[1050,1728,1729],{"class":1052,"line":1084},[1050,1730,1731],{"class":1373},"\u002F\u002F → { keyId: 'bd7e8268071ac41f', publicKeyB64: 'hpbs5UQivCLgPolFRoj5h1Q12OCXFlZkZfff-mEiAPM' }\n",[1522,1733,1735],{"id":1734},"verify-offline-without-noy-db","Verify — offline, without noy-db",[946,1737,1738,1739,1741],{},"Verification needs only ",[964,1740,981],{},", the field schema, and the published\npublic key. It recomputes each field hash from the claimed values and checks the\nsignature:",[1041,1743,1745],{"className":1043,"code":1744,"language":1045,"meta":1046,"style":1046},"import { verifyAttestation } from '@noy-db\u002Fattestation'\n\nconst result = await verifyAttestation({\n  qr,                                                    \u002F\u002F scanned from the document\n  claimedFields: { invoiceNo: 'INV-1042', total: 1234.5, issueDate: '2026-05-29' },\n  fieldSchema: attestation,\n  publicKeys: { 'bd7e8268071ac41f': 'hpbs5UQivCLgPolFRoj5h1Q12OCXFlZkZfff-mEiAPM' },\n})\n",[964,1746,1747,1766,1770,1787,1797,1838,1850,1877],{"__ignoreMap":1046},[1050,1748,1749,1751,1753,1756,1758,1760,1762,1764],{"class":1052,"line":1053},[1050,1750,1057],{"class":1056},[1050,1752,1061],{"class":1060},[1050,1754,1755],{"class":1064}," verifyAttestation",[1050,1757,1068],{"class":1060},[1050,1759,1071],{"class":1056},[1050,1761,1074],{"class":1060},[1050,1763,981],{"class":1077},[1050,1765,1081],{"class":1060},[1050,1767,1768],{"class":1052,"line":1084},[1050,1769,1109],{"emptyLinePlaceholder":1108},[1050,1771,1772,1774,1777,1779,1781,1783,1785],{"class":1052,"line":1105},[1050,1773,1175],{"class":1115},[1050,1775,1776],{"class":1064}," result ",[1050,1778,1181],{"class":1060},[1050,1780,1344],{"class":1056},[1050,1782,1755],{"class":1347},[1050,1784,1350],{"class":1064},[1050,1786,1353],{"class":1060},[1050,1788,1789,1792,1794],{"class":1052,"line":1112},[1050,1790,1791],{"class":1064},"  qr",[1050,1793,1217],{"class":1060},[1050,1795,1796],{"class":1373},"                                                    \u002F\u002F scanned from the document\n",[1050,1798,1799,1802,1804,1806,1808,1810,1812,1814,1816,1818,1820,1822,1824,1826,1828,1830,1832,1834,1836],{"class":1052,"line":1167},[1050,1800,1801],{"class":1125},"  claimedFields",[1050,1803,1129],{"class":1060},[1050,1805,1061],{"class":1060},[1050,1807,1138],{"class":1125},[1050,1809,1129],{"class":1060},[1050,1811,1074],{"class":1060},[1050,1813,1580],{"class":1077},[1050,1815,1214],{"class":1060},[1050,1817,1217],{"class":1060},[1050,1819,1147],{"class":1125},[1050,1821,1129],{"class":1060},[1050,1823,1592],{"class":1591},[1050,1825,1217],{"class":1060},[1050,1827,1157],{"class":1125},[1050,1829,1129],{"class":1060},[1050,1831,1074],{"class":1060},[1050,1833,1603],{"class":1077},[1050,1835,1214],{"class":1060},[1050,1837,1238],{"class":1060},[1050,1839,1840,1843,1845,1848],{"class":1052,"line":1172},[1050,1841,1842],{"class":1125},"  fieldSchema",[1050,1844,1129],{"class":1060},[1050,1846,1847],{"class":1064}," attestation",[1050,1849,1320],{"class":1060},[1050,1851,1852,1855,1857,1859,1861,1864,1866,1868,1870,1873,1875],{"class":1052,"line":1187},[1050,1853,1854],{"class":1125},"  publicKeys",[1050,1856,1129],{"class":1060},[1050,1858,1061],{"class":1060},[1050,1860,1074],{"class":1060},[1050,1862,1863],{"class":1125},"bd7e8268071ac41f",[1050,1865,1214],{"class":1060},[1050,1867,1129],{"class":1060},[1050,1869,1074],{"class":1060},[1050,1871,1872],{"class":1077},"hpbs5UQivCLgPolFRoj5h1Q12OCXFlZkZfff-mEiAPM",[1050,1874,1214],{"class":1060},[1050,1876,1238],{"class":1060},[1050,1878,1879,1881],{"class":1052,"line":1198},[1050,1880,1415],{"class":1060},[1050,1882,1418],{"class":1064},[1041,1884,1887],{"className":1885,"code":1886,"language":141,"meta":1046,"style":1046},"language-json shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\n  \"valid\": true,\n  \"signatureValid\": true,\n  \"perField\": [\n    { \"path\": \"invoiceNo\", \"match\": true },\n    { \"path\": \"total\", \"match\": true },\n    { \"path\": \"issueDate\", \"match\": true }\n  ],\n  \"revoked\": null\n}\n",[964,1888,1889,1893,1909,1922,1935,1971,2003,2035,2040,2054],{"__ignoreMap":1046},[1050,1890,1891],{"class":1052,"line":1053},[1050,1892,1353],{"class":1060},[1050,1894,1895,1898,1901,1904,1906],{"class":1052,"line":1084},[1050,1896,1897],{"class":1060},"  \"",[1050,1899,1900],{"class":1115},"valid",[1050,1902,1903],{"class":1060},"\"",[1050,1905,1129],{"class":1060},[1050,1907,1908],{"class":1060}," true,\n",[1050,1910,1911,1913,1916,1918,1920],{"class":1052,"line":1105},[1050,1912,1897],{"class":1060},[1050,1914,1915],{"class":1115},"signatureValid",[1050,1917,1903],{"class":1060},[1050,1919,1129],{"class":1060},[1050,1921,1908],{"class":1060},[1050,1923,1924,1926,1929,1931,1933],{"class":1052,"line":1112},[1050,1925,1897],{"class":1060},[1050,1927,1928],{"class":1115},"perField",[1050,1930,1903],{"class":1060},[1050,1932,1129],{"class":1060},[1050,1934,1195],{"class":1060},[1050,1936,1937,1939,1942,1945,1947,1949,1951,1953,1955,1957,1959,1962,1964,1966,1969],{"class":1052,"line":1167},[1050,1938,1201],{"class":1060},[1050,1940,1941],{"class":1060}," \"",[1050,1943,1944],{"class":1119},"path",[1050,1946,1903],{"class":1060},[1050,1948,1129],{"class":1060},[1050,1950,1941],{"class":1060},[1050,1952,1211],{"class":1077},[1050,1954,1903],{"class":1060},[1050,1956,1217],{"class":1060},[1050,1958,1941],{"class":1060},[1050,1960,1961],{"class":1119},"match",[1050,1963,1903],{"class":1060},[1050,1965,1129],{"class":1060},[1050,1967,1968],{"class":1060}," true",[1050,1970,1238],{"class":1060},[1050,1972,1973,1975,1977,1979,1981,1983,1985,1987,1989,1991,1993,1995,1997,1999,2001],{"class":1052,"line":1172},[1050,1974,1201],{"class":1060},[1050,1976,1941],{"class":1060},[1050,1978,1944],{"class":1119},[1050,1980,1903],{"class":1060},[1050,1982,1129],{"class":1060},[1050,1984,1941],{"class":1060},[1050,1986,1252],{"class":1077},[1050,1988,1903],{"class":1060},[1050,1990,1217],{"class":1060},[1050,1992,1941],{"class":1060},[1050,1994,1961],{"class":1119},[1050,1996,1903],{"class":1060},[1050,1998,1129],{"class":1060},[1050,2000,1968],{"class":1060},[1050,2002,1238],{"class":1060},[1050,2004,2005,2007,2009,2011,2013,2015,2017,2019,2021,2023,2025,2027,2029,2031,2033],{"class":1052,"line":1187},[1050,2006,1201],{"class":1060},[1050,2008,1941],{"class":1060},[1050,2010,1944],{"class":1119},[1050,2012,1903],{"class":1060},[1050,2014,1129],{"class":1060},[1050,2016,1941],{"class":1060},[1050,2018,1289],{"class":1077},[1050,2020,1903],{"class":1060},[1050,2022,1217],{"class":1060},[1050,2024,1941],{"class":1060},[1050,2026,1961],{"class":1119},[1050,2028,1903],{"class":1060},[1050,2030,1129],{"class":1060},[1050,2032,1968],{"class":1060},[1050,2034,1164],{"class":1060},[1050,2036,2037],{"class":1052,"line":1198},[1050,2038,2039],{"class":1060},"  ],\n",[1050,2041,2042,2044,2047,2049,2051],{"class":1052,"line":1241},[1050,2043,1897],{"class":1060},[1050,2045,2046],{"class":1115},"revoked",[1050,2048,1903],{"class":1060},[1050,2050,1129],{"class":1060},[1050,2052,2053],{"class":1060}," null\n",[1050,2055,2056],{"class":1052,"line":1278},[1050,2057,1326],{"class":1060},[946,2059,2060,2062,2063,2066,2067,2069,2070,2072,2073,2076,2077,2080,2081,2083,2084,2087,2088,1436],{},[964,2061,2046],{}," is ",[964,2064,2065],{},"null"," because no revocation list was supplied. A tampered value flips its\n",[964,2068,1928],{}," entry (and ",[964,2071,1900],{},") to ",[964,2074,2075],{},"false"," with ",[964,2078,2079],{},"reason: 'field mismatch'","; an unknown\n",[964,2082,1699],{}," yields ",[964,2085,2086],{},"reason: 'unknown keyId'",". For a complete static-HTML verifier page, see\nthe ",[955,2089,2090],{"href":516},"offline verifier recipe",[1522,2092,2094],{"id":2093},"revoke-and-publish-a-revocation-list","Revoke and publish a revocation list",[946,2096,2097,2098,2101],{},"Revocation is a membership set keyed by ",[964,2099,2100],{},"docId",", kept encrypted in the vault and\npublished as a signed list:",[1041,2103,2105],{"className":1043,"code":2104,"language":1045,"meta":1046,"style":1046},"await vault.revokeAttestation(docId)\n\nawait vault.getRevokedDocIds()\n\u002F\u002F → ['01JZK7Y1Q2M4N8R3T5V7X9ZABC']\n\nconst list = await vault.publishRevocationList()\n",[964,2106,2107,2120,2124,2137,2142,2146],{"__ignoreMap":1046},[1050,2108,2109,2111,2113,2115,2117],{"class":1052,"line":1053},[1050,2110,1535],{"class":1056},[1050,2112,1463],{"class":1064},[1050,2114,1436],{"class":1060},[1050,2116,985],{"class":1347},[1050,2118,2119],{"class":1064},"(docId)\n",[1050,2121,2122],{"class":1052,"line":1084},[1050,2123,1109],{"emptyLinePlaceholder":1108},[1050,2125,2126,2128,2130,2132,2135],{"class":1052,"line":1105},[1050,2127,1535],{"class":1056},[1050,2129,1463],{"class":1064},[1050,2131,1436],{"class":1060},[1050,2133,2134],{"class":1347},"getRevokedDocIds",[1050,2136,1726],{"class":1064},[1050,2138,2139],{"class":1052,"line":1112},[1050,2140,2141],{"class":1373},"\u002F\u002F → ['01JZK7Y1Q2M4N8R3T5V7X9ZABC']\n",[1050,2143,2144],{"class":1052,"line":1167},[1050,2145,1109],{"emptyLinePlaceholder":1108},[1050,2147,2148,2150,2153,2155,2157,2159,2161,2164],{"class":1052,"line":1172},[1050,2149,1175],{"class":1115},[1050,2151,2152],{"class":1064}," list ",[1050,2154,1181],{"class":1060},[1050,2156,1344],{"class":1056},[1050,2158,1463],{"class":1064},[1050,2160,1436],{"class":1060},[1050,2162,2163],{"class":1347},"publishRevocationList",[1050,2165,1726],{"class":1064},[1041,2167,2169],{"className":1885,"code":2168,"language":141,"meta":1046,"style":1046},"{\n  \"v\": 1,\n  \"revokedDocIds\": [\"01JZK7Y1Q2M4N8R3T5V7X9ZABC\"],\n  \"asOf\": \"2026-07-08T09:30:00.000Z\",\n  \"keyId\": \"bd7e8268071ac41f\",\n  \"sig\": \"0ghYQP_bd5O6qDth33-Xz08Q7_JbL96z…\"\n}\n",[964,2170,2171,2175,2191,2215,2235,2253,2272],{"__ignoreMap":1046},[1050,2172,2173],{"class":1052,"line":1053},[1050,2174,1353],{"class":1060},[1050,2176,2177,2179,2182,2184,2186,2189],{"class":1052,"line":1084},[1050,2178,1897],{"class":1060},[1050,2180,2181],{"class":1115},"v",[1050,2183,1903],{"class":1060},[1050,2185,1129],{"class":1060},[1050,2187,2188],{"class":1591}," 1",[1050,2190,1320],{"class":1060},[1050,2192,2193,2195,2198,2200,2202,2205,2207,2210,2212],{"class":1052,"line":1105},[1050,2194,1897],{"class":1060},[1050,2196,2197],{"class":1115},"revokedDocIds",[1050,2199,1903],{"class":1060},[1050,2201,1129],{"class":1060},[1050,2203,2204],{"class":1060}," [",[1050,2206,1903],{"class":1060},[1050,2208,2209],{"class":1077},"01JZK7Y1Q2M4N8R3T5V7X9ZABC",[1050,2211,1903],{"class":1060},[1050,2213,2214],{"class":1060},"],\n",[1050,2216,2217,2219,2222,2224,2226,2228,2231,2233],{"class":1052,"line":1112},[1050,2218,1897],{"class":1060},[1050,2220,2221],{"class":1115},"asOf",[1050,2223,1903],{"class":1060},[1050,2225,1129],{"class":1060},[1050,2227,1941],{"class":1060},[1050,2229,2230],{"class":1077},"2026-07-08T09:30:00.000Z",[1050,2232,1903],{"class":1060},[1050,2234,1320],{"class":1060},[1050,2236,2237,2239,2241,2243,2245,2247,2249,2251],{"class":1052,"line":1167},[1050,2238,1897],{"class":1060},[1050,2240,1699],{"class":1115},[1050,2242,1903],{"class":1060},[1050,2244,1129],{"class":1060},[1050,2246,1941],{"class":1060},[1050,2248,1863],{"class":1077},[1050,2250,1903],{"class":1060},[1050,2252,1320],{"class":1060},[1050,2254,2255,2257,2260,2262,2264,2266,2269],{"class":1052,"line":1172},[1050,2256,1897],{"class":1060},[1050,2258,2259],{"class":1115},"sig",[1050,2261,1903],{"class":1060},[1050,2263,1129],{"class":1060},[1050,2265,1941],{"class":1060},[1050,2267,2268],{"class":1077},"0ghYQP_bd5O6qDth33-Xz08Q7_JbL96z…",[1050,2270,2271],{"class":1060},"\"\n",[1050,2273,2274],{"class":1052,"line":1187},[1050,2275,1326],{"class":1060},[946,2277,2278,2279,1129],{},"Host that JSON anywhere (it contains only opaque ids). Verifiers first check the list's\nown signature, then pass it into ",[964,2280,2281],{},"verifyAttestation",[1041,2283,2285],{"className":1043,"code":2284,"language":1045,"meta":1046,"style":1046},"import { verifyRevocationList, verifyAttestation } from '@noy-db\u002Fattestation'\n\nconst trusted = await verifyRevocationList(list, publicKeyB64)\n\u002F\u002F → true\n\nconst r = await verifyAttestation({ qr, claimedFields, fieldSchema, publicKeys, revocation: { list } })\n\u002F\u002F → { valid: false, signatureValid: true, perField: [...all true], revoked: true, reason: 'revoked' }\n",[964,2286,2287,2310,2314,2335,2340,2344,2396],{"__ignoreMap":1046},[1050,2288,2289,2291,2293,2296,2298,2300,2302,2304,2306,2308],{"class":1052,"line":1053},[1050,2290,1057],{"class":1056},[1050,2292,1061],{"class":1060},[1050,2294,2295],{"class":1064}," verifyRevocationList",[1050,2297,1217],{"class":1060},[1050,2299,1755],{"class":1064},[1050,2301,1068],{"class":1060},[1050,2303,1071],{"class":1056},[1050,2305,1074],{"class":1060},[1050,2307,981],{"class":1077},[1050,2309,1081],{"class":1060},[1050,2311,2312],{"class":1052,"line":1084},[1050,2313,1109],{"emptyLinePlaceholder":1108},[1050,2315,2316,2318,2321,2323,2325,2327,2330,2332],{"class":1052,"line":1105},[1050,2317,1175],{"class":1115},[1050,2319,2320],{"class":1064}," trusted ",[1050,2322,1181],{"class":1060},[1050,2324,1344],{"class":1056},[1050,2326,2295],{"class":1347},[1050,2328,2329],{"class":1064},"(list",[1050,2331,1217],{"class":1060},[1050,2333,2334],{"class":1064}," publicKeyB64)\n",[1050,2336,2337],{"class":1052,"line":1112},[1050,2338,2339],{"class":1373},"\u002F\u002F → true\n",[1050,2341,2342],{"class":1052,"line":1167},[1050,2343,1109],{"emptyLinePlaceholder":1108},[1050,2345,2346,2348,2351,2353,2355,2357,2359,2362,2364,2366,2369,2371,2374,2376,2379,2381,2384,2386,2388,2390,2392,2394],{"class":1052,"line":1172},[1050,2347,1175],{"class":1115},[1050,2349,2350],{"class":1064}," r ",[1050,2352,1181],{"class":1060},[1050,2354,1344],{"class":1056},[1050,2356,1755],{"class":1347},[1050,2358,1350],{"class":1064},[1050,2360,2361],{"class":1060},"{",[1050,2363,1631],{"class":1064},[1050,2365,1217],{"class":1060},[1050,2367,2368],{"class":1064}," claimedFields",[1050,2370,1217],{"class":1060},[1050,2372,2373],{"class":1064}," fieldSchema",[1050,2375,1217],{"class":1060},[1050,2377,2378],{"class":1064}," publicKeys",[1050,2380,1217],{"class":1060},[1050,2382,2383],{"class":1125}," revocation",[1050,2385,1129],{"class":1060},[1050,2387,1061],{"class":1060},[1050,2389,2152],{"class":1064},[1050,2391,1415],{"class":1060},[1050,2393,1068],{"class":1060},[1050,2395,1418],{"class":1064},[1050,2397,2398],{"class":1052,"line":1187},[1050,2399,2400],{"class":1373},"\u002F\u002F → { valid: false, signatureValid: true, perField: [...all true], revoked: true, reason: 'revoked' }\n",[946,2402,2403,2406],{},[964,2404,2405],{},"vault.unrevokeAttestation(docId)"," removes an id from the set again.",[941,2408,2410],{"id":2409},"api-reference","API reference",[1522,2412,2414,2415,2418],{"id":2413},"vault-methods-enabled-by-withattestation","Vault methods (enabled by ",[964,2416,2417],{},"withAttestation()",")",[2420,2421,2422,2438],"table",{},[2423,2424,2425],"thead",{},[2426,2427,2428,2432,2435],"tr",{},[2429,2430,2431],"th",{},"Method",[2429,2433,2434],{},"Returns",[2429,2436,2437],{},"Purpose",[2439,2440,2441,2460,2475,2497,2510,2525],"tbody",{},[2426,2442,2443,2449,2454],{},[2444,2445,2446],"td",{},[964,2447,2448],{},"vault.issueAttestation(collection, id)",[2444,2450,2451],{},[964,2452,2453],{},"{ docId, qr, keyId, publicKeyB64 }",[2444,2455,2456,2457,1436],{},"Mint and sign a per-field commitment for a stored record; ",[950,2458,2459],{},"owner role only",[2426,2461,2462,2467,2472],{},[2444,2463,2464],{},[964,2465,2466],{},"vault.getDocumentSigningPublicKey()",[2444,2468,2469],{},[964,2470,2471],{},"{ keyId, publicKeyB64 }",[2444,2473,2474],{},"Read the vault's signing public key. Any role may read an existing key; only the owner may trigger the first-time mint.",[2426,2476,2477,2482,2487],{},[2444,2478,2479],{},[964,2480,2481],{},"vault.revokeAttestation(docId)",[2444,2483,2484],{},[964,2485,2486],{},"void",[2444,2488,2489,2490,2493,2494,2496],{},"Add an issued attestation to the revocation set; owner only. Throws ",[964,2491,2492],{},"AttestationError"," if ",[964,2495,2100],{}," was never issued by this vault.",[2426,2498,2499,2503,2507],{},[2444,2500,2501],{},[964,2502,2405],{},[2444,2504,2505],{},[964,2506,2486],{},[2444,2508,2509],{},"Remove an id from the revocation set; owner only.",[2426,2511,2512,2517,2522],{},[2444,2513,2514],{},[964,2515,2516],{},"vault.getRevokedDocIds()",[2444,2518,2519],{},[964,2520,2521],{},"string[]",[2444,2523,2524],{},"The current revoked ids, sorted.",[2426,2526,2527,2532,2537],{},[2444,2528,2529],{},[964,2530,2531],{},"vault.publishRevocationList()",[2444,2533,2534],{},[964,2535,2536],{},"RevocationList",[2444,2538,2539,2540,2543],{},"Sign the current set as a publishable ",[964,2541,2542],{},"{ v, revokedDocIds, asOf, keyId, sig }"," document; owner only.",[1522,2545,2547],{"id":2546},"attestation-1",[964,2548,609],{},[946,2550,2551,2554,2555,2558,2559,2562,2563,1436],{},[964,2552,2553],{},"vault.collection(name, { attestation })"," registers the field schema\n(",[964,2556,2557],{},"AttestationFieldSchema","): ",[964,2560,2561],{},"{ fields: [{ path, normalize }, …] }",". Issuing against a\ncollection without a declared schema throws ",[964,2564,2492],{},[1522,2566,2568],{"id":2567},"normalize",[964,2569,2567],{},[946,2571,2572],{},"Each declared field's value is canonicalized before hashing — the same rule on issue\nand verify:",[2420,2574,2575,2585],{},[2423,2576,2577],{},[2426,2578,2579,2582],{},[2429,2580,2581],{},"Normalizer",[2429,2583,2584],{},"Canonical form",[2439,2586,2587,2599,2613,2629,2639,2654],{},[2426,2588,2589,2594],{},[2444,2590,2591],{},[964,2592,2593],{},"trim",[2444,2595,2596],{},[964,2597,2598],{},"String(value).trim()",[2426,2600,2601,2610],{},[2444,2602,2603,2606,2607],{},[964,2604,2605],{},"lower"," \u002F ",[964,2608,2609],{},"upper",[2444,2611,2612],{},"trimmed, lower\u002Fupper-cased",[2426,2614,2615,2619],{},[2444,2616,2617],{},[964,2618,1227],{},[2444,2620,2621,2622,2625,2626,2418],{},"strip non-alphanumerics, upper-case (",[964,2623,2624],{},"'inv-1042'"," → ",[964,2627,2628],{},"'INV1042'",[2426,2630,2631,2636],{},[2444,2632,2633],{},[964,2634,2635],{},"digits",[2444,2637,2638],{},"keep digits only",[2426,2640,2641,2645],{},[2444,2642,2643],{},[964,2644,1266],{},[2444,2646,2647,2648,2625,2651,2418],{},"amount as integer cents; strings may carry currency symbols\u002Fcommas (",[964,2649,2650],{},"'฿1,234.50'",[964,2652,2653],{},"'123450'",[2426,2655,2656,2660],{},[2444,2657,2658],{},[964,2659,1302],{},[2444,2661,2662,2663],{},"UTC calendar date, ",[964,2664,2665],{},"YYYY-MM-DD",[1522,2667,2669],{"id":2668},"verifier-surface-re-exported","Verifier surface (re-exported)",[946,2671,2672,2673,2675],{},"The subpath re-exports the pure verifier so issue-side code can verify from one import;\nverifiers that never touch noy-db install ",[964,2674,981],{}," directly:",[2420,2677,2678,2687],{},[2423,2679,2680],{},[2426,2681,2682,2685],{},[2429,2683,2684],{},"Export",[2429,2686,2437],{},[2439,2688,2689,2702,2716,2729,2739,2752],{},[2426,2690,2691,2696],{},[2444,2692,2693],{},[964,2694,2695],{},"verifyAttestation(input)",[2444,2697,2698,2699,1436],{},"Full check: signature + per-field match + optional revocation → ",[964,2700,2701],{},"VerifyResult",[2426,2703,2704,2709],{},[2444,2705,2706],{},[964,2707,2708],{},"decodeQr(s)",[2444,2710,2711,2712,2715],{},"Decode\u002Fvalidate a scanned QR string into a ",[964,2713,2714],{},"QrPayload","; throws on malformed input.",[2426,2717,2718,2723],{},[2444,2719,2720],{},[964,2721,2722],{},"verifyRevocationList(list, publicKeyB64)",[2444,2724,2725,2726,1436],{},"Check a fetched revocation list's own signature → ",[964,2727,2728],{},"boolean",[2426,2730,2731,2736],{},[2444,2732,2733],{},[964,2734,2735],{},"isRevoked(docId, list)",[2444,2737,2738],{},"Membership test against an already-verified list.",[2426,2740,2741,2746],{},[2444,2742,2743],{},[964,2744,2745],{},"signRevocationList(ids, asOf, keyId, privateKeyPkcs8B64)",[2444,2747,2748,2749,2751],{},"Low-level list signing (what ",[964,2750,2163],{}," uses).",[2426,2753,2754,2757],{},[2444,2755,2756],{},"Types",[2444,2758,2759,2761,2762,2761,2764,2761,2767,2761,2769,1436],{},[964,2760,2714],{},", ",[964,2763,2557],{},[964,2765,2766],{},"VerifyInput",[964,2768,2701],{},[964,2770,2536],{},[1522,2772,2774],{"id":2773},"errors-and-constants","Errors and constants",[1000,2776,2777,2786,2794],{},[1003,2778,2779,2782,2783,1436],{},[964,2780,2781],{},"AttestationNotEnabledError"," — any of the six vault methods called without\n",[964,2784,2785],{},"attestationStrategy: withAttestation()",[1003,2787,2788,2790,2791,2793],{},[964,2789,2492],{}," — wrong role, missing schema, missing source record or field\nvalue, unknown ",[964,2792,2100],{}," on revoke.",[1003,2795,2796,2799,2800,2803],{},[964,2797,2798],{},"ATTESTATIONS_COLLECTION"," (",[964,2801,2802],{},"'_attestations'",") — the internal encrypted collection\nholding the signer, the revocation set, and one index entry per issued attestation.",[946,2805,2806,2807,2761,2810,1320,2813,2761,2816,2761,2819,2822],{},"Lower-level building blocks (",[964,2808,2809],{},"issueAttestationCore",[964,2811,2812],{},"revokeDocCore",[964,2814,2815],{},"unrevokeDocCore",[964,2817,2818],{},"getRevokedDocIdsCore",[964,2820,2821],{},"publishRevocationListCore"," and their\ncontext types) are exported for advanced embedding; typical applications use the vault\nmethods above.",[941,2824,2826],{"id":2825},"behavior-when-not-opted-in","Behavior when NOT opted in",[946,2828,2829,2830,2832,2833,2835,2836,2838],{},"All six vault methods throw ",[964,2831,2781],{}," directing you to\n",[964,2834,2785],{},". The collection-level ",[964,2837,609],{}," schema\noption is still accepted (it only registers the schema), so you can declare schemas\nbefore enabling the capability.",[941,2840,2842],{"id":2841},"limits-gotchas","Limits & gotchas",[1000,2844,2845,2859,2869,2879,2892,2908,2917],{},[1003,2846,2847,2850,2851,2854,2855,2858],{},[950,2848,2849],{},"Owner-only signing."," Issuing, revoking, and the first (key-minting) read of the\npublic key require the ",[964,2852,2853],{},"owner"," role — signing is the vault owner's identity\noperation. In a single-user vault the creator is the owner; other\n",[955,2856,2857],{"href":54},"roles"," can read an existing public key (it is not\nsecret) but cannot issue or revoke.",[1003,2860,2861,2864,2865,2868],{},[950,2862,2863],{},"The QR commits values, it does not carry them."," Verifiers must read the claimed\nvalues off the document itself; a hash mismatch only says ",[1033,2866,2867],{},"this field differs",", never\nwhat the original value was.",[1003,2870,2871,2874,2875,2878],{},[950,2872,2873],{},"Trust anchors on key distribution."," Verification is only as strong as how\nverifiers obtained ",[964,2876,2877],{},"publicKeyB64"," — bundle it into the verifier or serve it from a\nchannel the issuer controls.",[1003,2880,2881,2884,2885,2887,2888,2891],{},[950,2882,2883],{},"Verify the revocation list before trusting it."," ",[964,2886,2281],{}," performs a\nmembership check only; call ",[964,2889,2890],{},"verifyRevocationList"," on a fetched list first. A stale\nor truncated list lets a revoked document pass — that freshness risk is the\nverifier's.",[1003,2893,2894,2899,2900,2903,2904,2907],{},[950,2895,2896,2898],{},[964,2897,1302],{}," normalizes to the UTC calendar date."," A local-time ",[964,2901,2902],{},"Date"," near midnight\ncan shift by a day; prefer ISO date strings (",[964,2905,2906],{},"'2026-05-29'",") on both sides.",[1003,2909,2910,2913,2914,2916],{},[950,2911,2912],{},"Fresh salt per issuance."," Re-issuing the same record yields a different QR and a\nnew ",[964,2915,2100],{},"; two QRs for identical values cannot be correlated, and revocation is\nper-issuance, not per-record.",[1003,2918,2919,2922],{},[950,2920,2921],{},"Issuance hashes the canonical stored record",", independent of any display locale —\nverifiers must claim the stored (raw) values, not a locale-resolved presentation.",[941,2924,2926],{"id":2925},"see-also","See also",[1000,2928,2929,2935,2941,2949,2959],{},[1003,2930,2931,2934],{},[955,2932,2933],{"href":516},"Offline document-attestation verifier"," — the complete\nverify-side recipe (static HTML page, six verdict states)",[1003,2936,2937,2940],{},[955,2938,2939],{"href":520},"AWS-KMS PDF attestation"," — rendering the QR into a\ngenerated PDF server-side",[1003,2942,2943,2945,2946],{},[955,2944,957],{"href":48}," ·\n",[955,2947,2948],{"href":54},"Permissions & keyring",[1003,2950,2951,2954,2955],{},[955,2952,2953],{"href":598},"Services overview"," · ",[955,2956,2958],{"href":2957},"\u002Forientation","Orientation map",[1003,2960,2961,2962,1436],{},"Proven by showcase ",[955,2963,2967],{"href":2964,"rel":2965},"https:\u002F\u002Fgithub.com\u002Fnoy-db\u002Fdocs\u002Fblob\u002Fmain\u002Fshowcases\u002Fsrc\u002F89-attestation-revocation.showcase.test.ts",[2966],"nofollow",[964,2968,2969],{},"89-attestation-revocation",[2971,2972,2973],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}",{"title":1046,"searchDepth":1105,"depth":1105,"links":2975},[2976,2977,2978,2979,2984,2992,2993,2994],{"id":943,"depth":1084,"text":944},{"id":997,"depth":1084,"text":998},{"id":1023,"depth":1084,"text":1024},{"id":1519,"depth":1084,"text":1520,"children":2980},[2981,2982,2983],{"id":1524,"depth":1105,"text":1525},{"id":1734,"depth":1105,"text":1735},{"id":2093,"depth":1105,"text":2094},{"id":2409,"depth":1084,"text":2410,"children":2985},[2986,2988,2989,2990,2991],{"id":2413,"depth":1105,"text":2987},"Vault methods (enabled by withAttestation())",{"id":2546,"depth":1105,"text":609},{"id":2567,"depth":1105,"text":2567},{"id":2668,"depth":1105,"text":2669},{"id":2773,"depth":1105,"text":2774},{"id":2825,"depth":1084,"text":2826},{"id":2841,"depth":1084,"text":2842},{"id":2925,"depth":1084,"text":2926},null,"Issue signed, per-field commitments for vault records as QR credentials anyone can verify fully offline — plus revocation with a signed, publishable list.","md",{},"service",{"title":609,"description":2996},"stable","important","fyh4ECPH09iNG3McAH9iVKBQG-cQuT94UNiLXExBw7E",{"data":3005,"body":3006},{},{"type":3007,"children":3008},"root",[3009],{"type":3010,"tag":946,"props":3011,"children":3012},"element",{},[3013],{"type":3010,"tag":964,"props":3014,"children":3016},{"className":3015},[],[3017],{"type":3018,"value":3019},"text","with-audit",{"data":3021,"body":3022},{},{"type":3007,"children":3023},[3024],{"type":3010,"tag":946,"props":3025,"children":3026},{},[3027],{"type":3010,"tag":964,"props":3028,"children":3030},{"className":3029},[],[3031],{"type":3018,"value":1100},{"data":3033,"body":3034},{},{"type":3007,"children":3035},[3036],{"type":3010,"tag":946,"props":3037,"children":3038},{},[3039],{"type":3010,"tag":964,"props":3040,"children":3042},{"className":3041},[],[3043],{"type":3018,"value":2417},1791896588538]