A three-source conformance checker for AT Protocol Personal Data Servers (spec + lexicons + reference behavior). Pre-alpha.

Identity surface checks: DID document shape and handle semantics #6

Open katsuricata.com
Open opened by and assigned to katsuricata.com

The spec pins the identity surface precisely and none of it is checked yet:

  • DID document shape: #atproto Multikey verification method, #atproto_pds service entry with strict URL shape (scheme + host + optional port only), alsoKnownAs with at://<handle>
  • Handle semantics: syntax rules, disallowed TLDs, bidirectional confirmation, handle.invalid sentinel behavior
  • Legacy key encodings must be tolerated: the reference PDS's own DID docs still use uncompressed EcdsaSecp256k1VerificationKey2019, which parseMultikey rejects; the harness already carries a legacy decode path (see docs/interop-traps.md)

Mostly readonly checks; needs an account DID to inspect, which the discovery pass or a provisioned account provides.

Done when: DID-document and handle checks exist and pass against the oracle.

Sign up or Sign in to add to the discussion.