A permission names members on one of three axes: they may reach the subject (view) or may also be acted on (interact). Extend makes members sources of further grants — an npub or relay grant can do both.
A permission names members on one of three axes: they may reach the subject (view) or may also be acted on (interact). Extend makes members sources of further grants — an npub or relay grant can do both.
view may reach the subject — reading
viewmay reach the subject — reading
interact may reach the subject and be acted on — the subject may name, answer and message them
interactmay reach the subject and be acted on — the subject may name,answer and message them
extend members are sources: the grants they publish — or a peer is given — flow in
extendmembers are sources: the grants they publish — or a peer is given —flow in
People npub a public key
Peoplenpuba public key
Places relay a relay URL
Placesrelaya relay URL
Things event an event, by its id
Thingseventan event, by its id
view/npub Everything this person publishes openly may reach the subject, wherever it arrives. Only the publisher counts: being mentioned is not enough.
view/npubEverything this person publishes openly may reach the subject, wherever itarrives.Only the publisher counts: being mentioned is not enough.
interact/npub …and the subject may tag them, reply to and quote their events, and exchange private messages with them. Every guardian has this implicitly.
interact/npub…and the subject may tag them, reply to and quote their events, andexchange private messages with them.Every guardian has this implicitly.
extend/npub Adopt what a curator publishes (via curator), or inherit what a peer — another subject — is permitted (via peer). The member itself is not admitted: it is a source only.
extend/npubAdopt what a curator publishes (via curator), or inherit what a peer —another subject — is permitted (via peer).The member itself is not admitted: it is a source only.
view/relay Plain events that arrive from this relay may reach the subject. Never encrypted material: that needs an interact grant on its sender.
view/relayPlain events that arrive from this relay may reach the subject.Never encrypted material: that needs an interact grant on its sender.
interact/relay …and it counts as a permitted destination: once a guardian grants any interact/relay, the subject's own events may be hosted only on such relays. A covered recipient's own inbox is still reachable.
interact/relay…and it counts as a permitted destination: once a guardian grants anyinteract/relay, the subject's own events may be hosted only on such relays.A covered recipient's own inbox is still reachable.
extend/relay Adopt the grants the relay's operator publishes — the operator being the key named in the relay's information document. Convenient, but that document is unsigned and its operator can change.
extend/relayAdopt the grants the relay's operator publishes — the operator being thekey named in the relay's information document.Convenient, but that document is unsigned and its operator can change.
view/event This exact event may reach the subject, whoever published it. Named by id; a replaced version is a different event.
view/eventThis exact event may reach the subject, whoever published it.Named by id; a replaced version is a different event.
interact/event …and the subject may reference this exact event, e.g. quote it. Tagging its author still needs the author covered. One version: an edit at the same address needs a new grant.
interact/event…and the subject may reference this exact event, e.g. quote it. Tagging itsauthor still needs the author covered.One version: an edit at the same address needs a new grant.
no extend/event An event is not a party, so it cannot be a source. The eight categories are closed.
no extend/eventAn event is not a party, so it cannot be a source.The eight categories are closed.
Three more instruments complete the vocabulary
Three more instruments complete the vocabulary
Restrictions narrow A restriction entry matches on five axes, and allows or denies: polarity allow | deny kinds * or explicit kind numbers, e.g. 1,7 weekdays * or ISO days, e.g. 1,2,3,4,5 time * or a local window, e.g. 21:00-07:00 direction * | input | output opacity * | opaque | plain …plus one optional demand: rebroadcast: "deny" — the signer adds NIP-70's ["-"] tag.
Restrictions narrowA restriction entry matches on five axes, and allows or denies:polarity allow | denykinds * or explicit kind numbers, e.g. 1,7weekdays * or ISO days, e.g. 1,2,3,4,5time * or a local window, e.g. 21:00-07:00direction * | input | outputopacity * | opaque | plain…plus one optional demand: rebroadcast: "deny" — the signer adds NIP-70's ["-"] tag.
Deny gates: out, full stop Lists of pubkeys, events, relays and shared blocklists. A deny gate over-rules every grant, from any guardian, at every depth, in both directions. A guardian's “never” is a deny — omitting something from a whitelist is not.
Deny gates: out, full stopLists of pubkeys, events, relays and shared blocklists.A deny gate over-rules every grant, from any guardian, atevery depth, in both directions.A guardian's “never” is a deny — omitting something from awhitelist is not.
The global set Restriction entries that gate the subject as a whole — a bedtime, a set of kinds — before any permission is consulted. It binds everyone, the guardians' own line to the subject included.
The global setRestriction entries that gate the subject as a whole — abedtime, a set of kinds — before any permission is consulted.It binds everyone, the guardians' own line to the subjectincluded.