biometric_device_keys

{“what”:“Unique integer ID for this device key record.”,“why”:“Without it, there is no way to target a specific device key for revocation or update.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:00.993134633+00:00”}

{“what”:“Integer ID of the user account this key belongs to.”,“why”:“Without it, we cannot determine which account a device key authorizes.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:01.009539760+00:00”}

{“what”:“Human-readable label for the device, e.g., ‘iPhone 12’.”,“why”:“Without it, users cannot distinguish multiple devices in account settings.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:01.050837834+00:00”}

{“what”:“Type of key storage, e.g., ‘secure_enclave’ or ‘tpm’.”,“why”:“Without it, we cannot enforce platform-specific key handling or security policies.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:01.063988244+00:00”}

{“what”:“DER-encoded public key bytes used for signature verification.”,“why”:“Without it, the server cannot verify a biometric device’s cryptographic proof.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:01.083104540+00:00”}

{“what”:“Date and time (with time zone) when this key was added.”,“why”:“Without it, we cannot track device enrollment history or enforce key rotation.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:01.098272719+00:00”}

{“what”:“Timestamp of the last successful authentication using this key, with time zone.”,“why”:“Without it, we cannot identify inactive devices for security review or user notification.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:01.124100683+00:00”}