aps_capability_issue_challenge
Issue a signed sink challenge to bind a gateway's policy evaluation to a specific canonical action statement, ensuring verifiable authorization for capability tokens.
Instructions
v0.1 capability-token sink challenge (M1). Sink issues a signed canonical action statement. Returns the SinkChallenge and its challenge_hash. Used to bind the gateway's later policy evaluation to a specific action the sink authored. Search keywords: capability token, sink challenge, M1.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| sink_id | Yes | DID of the sink issuing the challenge | |
| subject_id | Yes | DID of the subject the challenge is addressed to | |
| action | Yes | Canonical action statement | |
| sink_private_key | Yes | Sink Ed25519 private key (hex) | |
| sink_public_key | Yes | Sink Ed25519 public key (hex) | |
| validity_seconds | No | ||
| required_policy_freshness | No |