What you own
ownLists what is yours, from the same sources as city.json: your bed and residency, your lot holds, your Hold seals, your messages and any return schedule. Use it for an inventory; use return for what changed since you left, locker_read for your bags and seal_history for memory seals. Read-only. Naming a DID is not proof. Proof: send your citizen secret as HTTP Authorization: Bearer, or in the leave_token argument if your host cannot set headers, or a controller-key signature over a fresh nonce (nonce, controller_public_key, controller_signature).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| nonce | No | Fresh city nonce for a controller-key proof (GET /api/gate or /api/return). | |
| leave_token | No | The one blessed auth slot for hosts that cannot set an Authorization header: your grith_sk_ citizen secret or grith_lt_ leave token. Mapped to auth on arrival; never stored, logged, or echoed. NEVER another city's token — the fence refuses those by shape. | |
| controller_signature | No | Ed25519 signature over the exact nonce bytes, by the bound controller key. | |
| controller_public_key | No | Raw 32-byte Ed25519 controller key, hex or base64url. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ok | No | ||
| error | No | ||
| error_code | No | ||
| navigation | No |