A braid is the set of versions and possibly a final, which share the same public key. It provides the illusion of mutable node, by tracking the most recent version. Of course, there may be more than one most recent version, and it is then up to the application to decide how to handle that.

Access control is handled with access to cryptographic keys. Anybody with the:

  • public key can fetch a braid (assuming they have access to a store that contains it).

  • shared key can read a braid's contents (assuming they can fetch it).

  • secret key and shared key can write to a braid.

  • rotation signing key and rotation seed can finalize a braid, possibly marking a successor.