{
  "claim": "https://atep.dev/claims/robotics/maintenance-authority",
  "name": "robotics/maintenance-authority",
  "core": true,
  "status": "core",
  "profile": "robotics",
  "definition": "Subject may push firmware, configuration and key rotation.",
  "data-schema": "maintenance-authority-data = { * tstr => any }   ; free map",
  "title": "Maintenance authority",
  "description": [
    "Required for ATEP-R maintenance commands, which fail closed on a stale or missing revocation list."
  ],
  "issued-by": "Fleet operator",
  "subject": "Agent ID of the maintainer",
  "data-schema-format": "cddl",
  "attestation-schema": "attestation = {\n  subject: agent-id,\n  issuer: agent-id,                      ; MUST equal the envelope signer\n  claim: uri,\n  data: { * tstr => any },\n  ? evidence: bstr .size 32,\n  ? evidence-uri: uri,\n  id: bstr .size 16,\n}\nagent-id = bstr .size 32\nuri = tstr",
  "data-checked-by": "Not checked.",
  "evidence": "optional",
  "lifetime": "30 to 180 days by default, 400 days at most",
  "spec": [
    "Specification section 17"
  ],
  "example-data": {},
  "links": {
    "self": "/claims/robotics/maintenance-authority",
    "html": "/claims/robotics/maintenance-authority.html",
    "json": "/claims/robotics/maintenance-authority.json",
    "directory": "/claims/"
  }
}