From e720a5cda8820e2d9357161f8f9bd76f87e2631f Mon Sep 17 00:00:00 2001 From: Wren <5217c5c2f7bfb4333e46d17c98a9255a52dadee18dcd43a43536b95e6776dfa0@buzz.block.builderlab.xyz> Date: Fri, 21 Aug 2026 15:57:22 -0400 Subject: [PATCH] Clarify missing delegated skew Distinguish missing delegated skew configuration from the optional not_before evidence field. Co-authored-by: Wren <5217c5c2f7bfb4333e46d17c98a9255a52dadee18dcd43a43536b95e6776dfa0@buzz.block.builderlab.xyz> Signed-off-by: Wren <5217c5c2f7bfb4333e46d17c98a9255a52dadee18dcd43a43536b95e6776dfa0@buzz.block.builderlab.xyz> --- docs/nips/NIP-FI-DELEG.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/docs/nips/NIP-FI-DELEG.md b/docs/nips/NIP-FI-DELEG.md index 30e8312019..9b9134c2b3 100644 --- a/docs/nips/NIP-FI-DELEG.md +++ b/docs/nips/NIP-FI-DELEG.md @@ -56,8 +56,9 @@ The evidence authenticates every field, has one unambiguous owner and delegate, matches the server-owned domain and exact request or target, and has a finite expiry satisfying `now < mandatory_expiry`; equality at an expiry is expired. Optional `not_before` satisfies `not_before <= now + skew`, using the -configured delegated `skew`; arithmetic is overflow-safe. A missing value -denies. The proven actor equals `delegate_key`. [FI-DELEG-EVIDENCE-CLOSED] +configured delegated `skew`; arithmetic is overflow-safe. A missing +configured `skew` denies. The proven actor equals `delegate_key`. +[FI-DELEG-EVIDENCE-CLOSED] A delegated request carries fresh request-appropriate Nostr proof and no `Nostr-Federated-Identity` or profile provenance field. Mixed direct and