network.attested.signature

objectnetwork.attested

Shared protocol vocabulary

network.attested.* is defined upstream by attested.network. The drafts here are our proposed contributions; both brokers and point-of-sale services implement subsets of this namespace.

Schema

Name	Type	Required	Description
key	string	required	did:key public-key reference used to verify this signature.
cid	string (cid)	required	CID of the canonical signing payload (the record with `signatures` stripped, `$sig` metadata inserted including the repository DID, DAG-CBOR encoded, SHA-256 wrapped as CIDv1).
signature	bytes	required	Normalized ECDSA signature bytes over the CID. Curve is inferred from `key` (P-256, P-384, or K-256). Serialized as `{ "$bytes": "<base64>" }` per lex bytes encoding.
issuer	string (did)	optional	Optional. DID of the issuing party. Useful when `key` does not directly identify the issuer.
issuedAt	string (datetime)	optional	Optional. When the signature was produced.
role	string	optional	Optional. Role under which the issuer signed. Lets verifiers reason about completeness (e.g. require both PoS and AppView attestations on a cart).