codexproof

glossary / Namespace

a hierarchical name prefix that scopes authority - in codexproof, the slash-delimited prefix a domain owns, under which all its data names and signer names must nest.

trust schemasigning proxy
Namespace - The jurisdiction as a tree: everything above the dashed line signable, everything below refused

The jurisdiction as a tree: everything above the dashed line signable, everything below refused.

Etymology and backstory

namespaces are one of computing's oldest disciplines (file paths, DNS labels, programming-language scopes), but their use as a SECURITY boundary is the NDN inheritance: when names are hierarchical and signed, prefix containment becomes a checkable claim of jurisdiction. DNS pioneered global hierarchical delegation; NDN moved the same shape into the data plane.

Ecosystem

DNS zones, Kubernetes namespaces, AWS ARN prefixes, NDN name trees - the same idea at different layers: authority scoped by prefix.

In codexproof

each signing proxy is namespace-pinned via PROV_NAMESPACE and refuses (HTTP 403) to sign any template whose names fall outside its pin - the single veto in the signing path. The trust rule's prefix-containment check is the verifier-side mirror of the same discipline. Blast radius of a domain compromise = its namespace, exactly (Q19).

"The namespace is the jurisdiction - the proxy won't sign outside it, the schema won't authorize outside it, and a compromise can't reach outside it."
References: Mockapetris, "Domain Names - Concepts and Facilities," RFC 1034 (1987) - the ancestral hierarchical delegation. Yu et al., ICN (2015) for namespace-scoped signing authority.

All terms · Questions & answers · The verifier