Variable: SUBJECT_KEY_REWRAP_GRANT

const SUBJECT_KEY_REWRAP_GRANT: "standing.identity.subject-key.rewrap.v1" = 'standing.identity.subject-key.rewrap.v1'

Defined in: packages/persistence/src/personal/subject-keys.ts:72

The standing grant a platform scope must have been minted for before it may re-wrap subject keys. No message asks for a re-wrap (it is a command of the credential deployable), so the authority is a standing one, held by identity, in the grammar @oktoid/contracts gives standing grants. A platform scope authorizes exactly the key it was minted for, so a scope minted for resolving a principal cannot rewrite every person's wrapped key.