Clarify missing delegated skew

Distinguish missing delegated skew configuration from the optional
not_before evidence field.

Co-authored-by: Wren <5217c5c2f7bfb4333e46d17c98a9255a52dadee18dcd43a43536b95e6776dfa0@buzz.block.builderlab.xyz>
Signed-off-by: Wren <5217c5c2f7bfb4333e46d17c98a9255a52dadee18dcd43a43536b95e6776dfa0@buzz.block.builderlab.xyz>
This commit is contained in:
Wren
2026-08-21 15:57:22 -04:00
parent 1eb0639a55
commit e720a5cda8

View File

@@ -56,8 +56,9 @@ The evidence authenticates every field, has one unambiguous owner and delegate,
matches the server-owned domain and exact request or target, and has a finite matches the server-owned domain and exact request or target, and has a finite
expiry satisfying `now < mandatory_expiry`; equality at an expiry is expired. expiry satisfying `now < mandatory_expiry`; equality at an expiry is expired.
Optional `not_before` satisfies `not_before <= now + skew`, using the Optional `not_before` satisfies `not_before <= now + skew`, using the
configured delegated `skew`; arithmetic is overflow-safe. A missing value configured delegated `skew`; arithmetic is overflow-safe. A missing
denies. The proven actor equals `delegate_key`. [FI-DELEG-EVIDENCE-CLOSED] configured `skew` denies. The proven actor equals `delegate_key`.
[FI-DELEG-EVIDENCE-CLOSED]
A delegated request carries fresh request-appropriate Nostr proof and no A delegated request carries fresh request-appropriate Nostr proof and no
`Nostr-Federated-Identity` or profile provenance field. Mixed direct and `Nostr-Federated-Identity` or profile provenance field. Mixed direct and