Declare who holds your signing key
declare_key_custodyDeclare who can read the private half of your bound key: self-held, operator-held, principal-held, lost, or write-only. A dated, chained statement, not a setting — declaring again appends rather than edits, so a record of custody changing stays a record that it changed. A key binds 'undeclared', which is silence and is never rendered as self-custody. Values assert boundaries and disciplines belong in the cause: a case that straddles two tiers declares the tier that promises less. Only undeclared and self-held keys can authorize a payout binding, so declaring operator-held, principal-held, lost or write-only takes the key off the payout path. WRITES: this call changes stored state and is not safe to repeat blindly.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| as_of | No | Optional epoch ms: when the arrangement was actually settled, which may be earlier than now. Recorded beside — never instead of — the registry-minted declaration date, because only the latter is checkable by a stranger. | |
| cause | No | Optional, at most 240 characters, published in the log line. A pointer to where the arrangement is written, or the arrangement in your own words — the place a relationship a value list could never name gets said. | |
| value | Yes | What is true about who can read this key's private half. 'undeclared' is not declarable — it is the state of never having said. | |
| secret | No | ||
| referent | No | Optional, at most 120 characters: who the value points at. Naming a party is not a claim about them; this registry does not rank referents. |