The URI.
The capability; empty when there is none.
The key references (a copy).
The delegate references (a copy).
The name; empty when there is none.
The permissions (live).
The allowed privileges (a copy).
The denied privileges (a copy).
StaticfromA service at a URI (a components error for text that is not a URI); references and permissions can be added later.
Sets (or clears, with "") the capability.
Sets the capability once; Duplicate when set, EmptyValue when empty.
Whether the service references this key.
Adds a key reference; Duplicate when it is already there.
Removes a key reference; whether it was there.
References the key's public keys.
Whether the service references this delegate.
Adds a delegate reference; Duplicate when it is already there.
Removes a delegate reference; whether it was there.
References the delegate's (or document's) XID.
Sets the name once; Duplicate when set, EmptyValue when empty.
Denies privilege. Written to the wire, but not read back: see the class.
Empties both sets.
The URI as the subject; 'key', 'delegate', 'capability', 'name' and the permissions.
StaticfromA service from its envelope. Rejects nested assertions
(UnexpectedNestedAssertions) and any predicate but 'key',
'delegate', 'capability', 'name' and 'allow'
(UnexpectedPredicate; a predicate that is not a known value is
EnvelopeParsing); a subject or object of the wrong type is Cbor.
Same URI, references, permissions, capability and name — as the reference's equality.
A copy.
A service of a XID document: a URI, key and delegate references, a capability, a name and permissions. On the wire only
'allow'permissions round-trip: the parser rejects'deny'as the reference's does.