A registered device identity. Identity is attested at enrollment.

interface DeviceIdentity {
    defaultInitiator?: Initiator;
    firmware: string;
    id: string;
    leaseExpiresAt?: number;
    overlayIp?: string;
    publicKey: string;
    revoked: boolean;
    role: DeviceRole;
    tenantPath: readonly string[];
    wgPublicKey?: string;
}

Properties

defaultInitiator?: Initiator

Initiator the gateway attributes to traffic from this device when the transport carries no workflow context (for example an attended evaluator workstation is "clinician", a bedside monitor is "scheduled").

firmware: string
id: string
leaseExpiresAt?: number

Short-lived credential: after this epoch ms the gateway drops the peer and decide() denies.

overlayIp?: string

Overlay address assigned at enrollment (WireGuard mode), e.g. "10.66.0.12".

publicKey: string

Hex encoded Ed25519 public key used for device attestation.

revoked: boolean
tenantPath: readonly string[]

Tenant path, root first, e.g. ["platform","oem-a","hs-1","fac-1","unit-icu","grp-1"].

wgPublicKey?: string

WireGuard (X25519) public key, base64, registered at enrollment.