Type Alias: SigningKeyPurpose

SigningKeyPurpose = "trust-chain" | "identifier-update" | "identifier-assertion" | "audit-checkpoint"

Defined in: packages/key-custodian/src/port.ts:45

What a signing key is for:

• trust-chain: the federation entity keys that sign entity statements (slice 2).
• identifier-update: the key that signs the entries of a did:webvh log, which is the key that controls the identifier.
• identifier-assertion: the key an identifier's document publishes for signing credentials.
• audit-checkpoint: the key that signs the audit chain's checkpoints.

They are separate purposes, although the policy rows are alike today, so that a process is started for the ones it needs and refuses the rest: the audit deployable cannot be asked for a trust-chain key.