events.iterate.com

Event type

events.iterate.com/project/human-approval-key-added

Enroll a public key whose holder may grant held egress requests. Once any active key exists, grants MUST carry a valid ECDSA P-256 signature over the canonical approval message (approval.v1) — unsigned grants are ignored. Rejections never require a signature.

Payload schema

keyIdstring

Fingerprint id: first 16 hex chars of the key's SHA-256.

publicKeystring

Base64 uncompressed P-256 public point (65 bytes, 0x04‖X‖Y).

labelstringoptional

Human-readable device label, e.g. the enrolling machine.

Raw JSON schema
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "keyId": {
      "type": "string",
      "description": "Fingerprint id: first 16 hex chars of the key's SHA-256."
    },
    "publicKey": {
      "type": "string",
      "description": "Base64 uncompressed P-256 public point (65 bytes, 0x04‖X‖Y)."
    },
    "label": {
      "description": "Human-readable device label, e.g. the enrolling machine.",
      "type": "string"
    }
  },
  "required": [
    "keyId",
    "publicKey"
  ]
}