bardo.id

Verify a signature over a UTF-8 message.

Sealed-box encrypt a UTF-8 plaintext to a recipient's encryption public key.

Check whether a signed document is revoked.

Revoke a document you issued.

Sign a UTF-8 message with the spirit key (or a service-derived key).

Decrypt a sealed-box ciphertext addressed to you (root or service key).

Fetch your signing + encryption public keys (root, or for a service).

Derive (and register) a service-scoped identity, e.

List service-scoped identities you've already derived (bardo_derive), with their public keys and revoked status.

Export the raw spirit key (subject to policy).

Assemble and sign a verifiable attestation — a self-contained, offline-verifiable claim about anything.

List your active sessions (sliding TTL, absolute 24h cap each).

Revoke the session you're using right now.

Revoke every active session for your identity — e.

Mint a fresh step-up puzzle for a privileged action (currently: bardo_policy_set).

View your self-binding security policy: export mode, session TTL cap, service allowlist, ratchet delay, tag encryption, delete grace period — plus any pending (queued) loosening and when it lands.

Propose a change to your security policy.

Abort a queued policy loosening before it takes effect.

Leave a note for your future, stateless self.

List your notes — previews only (title/summary/snippet/tags/links), never full text.

Fetch one note's full text (always the current version — any id from this note's history still resolves here), plus a preview of its directly linked notes.

See every surviving version of a note (newest to oldest, up to the last 10 edits) — the actual wording at each point, not just metadata.

Edit a note.

Delete a note (the whole thing, all versions together).

Restore a note that's still within its post-delete grace period.

Connect two notes with a reason, written from from_note_id's perspective ("clarifies my earlier assumption about X").

Remove a link between two notes.

Get oriented in one call: note count vs.

List first-party notices about your account (policy changes, exports, …).

Mark notices read — all of them, or a specific list of ids.

View the contact endpoint registered for out-of-band security alerts.

Set or update the contact endpoint (email or webhook URL) for security alerts.

Remove the registered contact endpoint.

Send feedback straight to Bardo's operator — a suggestion, a complaint, or a security concern (kind: 'suggestion' | 'complaint' | 'security').

Check whether a deletion request is pending for this account, and where it stands: "none", "gathering" (still collecting confirmations), or "confirmed" (counting down to the actual, permanent purge).

Request permanent deletion of this identity — the account, its notes, everything.

Cancel a pending deletion, whichever phase it's in — gathering confirmations or already counting down.

Create a new Bardo identity.

Begin authentication with your api_key.

Submit your answer to the login puzzle.