Add a connection entry, verified by one authenticated fetch.

A display name for an organisation, project or environment. Identity is the immutable id, so this is a label and a rename never breaks a reference. The 128-byte bound is the one the organisation contract has carried since the first slice, adopted for every entity so there is one number rather than four; no ADR fixes a per-entity name length. The grammar itself (non-empty, no control characters, no surrounding whitespace) is enforced in the domain rather than restated as a pattern here — two grammars would be two things to keep in sync.

The bound is 128 UTF-8 BYTES, and the server is authoritative. maxLength below counts Unicode code points, which is the only length JSON Schema can express, so a name of 100 emoji satisfies this schema and is still refused by the server with bad_request. Clients that want to pre-validate must measure the UTF-8 encoding, not the string length.

A canonical https:// origin — no userinfo, no path, no query, no fragment, no plaintext HTTP. A value carrying one is REFUSED, never silently normalised.

The fingerprint the human confirmed interactively.

The connection credential minted on the serving side. Verified by one authenticated fetch before the entry is committed, then sealed under the instance keyring and never returned again.

A prefixed UUIDv7, e.g. org_0198….

A display name for an organisation, project or environment. Identity is the immutable id, so this is a label and a rename never breaks a reference. The 128-byte bound is the one the organisation contract has carried since the first slice, adopted for every entity so there is one number rather than four; no ADR fixes a per-entity name length. The grammar itself (non-empty, no control characters, no surrounding whitespace) is enforced in the domain rather than restated as a pattern here — two grammars would be two things to keep in sync.

The bound is 128 UTF-8 BYTES, and the server is authoritative. maxLength below counts Unicode code points, which is the only length JSON Schema can express, so a name of 100 emoji satisfies this schema and is still refused by the server with bad_request. Clients that want to pre-validate must measure the UTF-8 encoding, not the string length.

The canonical https origin. Immutable for the life of the entry.

base64(sha256(SubjectPublicKeyInfo)), confirmed by a human at add time and verified on every connection before any bytes are written. Immutable for the life of the entry.

RFC 3339 UTC, microsecond precision.

The most recent fetch's outcome. A closed enum because the operator's fix differs per outcome, and collapsing them into one "error" is what makes a directory card useless.

RFC 3339 UTC, microsecond precision.

RFC 3339 UTC, microsecond precision.

The listing below is a SNAPSHOT, not current. Computed from the outcome rather than the age: a fetch that just failed makes even a one-second-old snapshot stale.

The snapshot's age, the number the card prints beside "unreachable".