# `BoundedAuthorityProtocol.V1.GrantFacts`
[🔗](https://github.com/baselabs/bounded_authority_protocol/blob/v1.0.0/lib/bounded_authority_protocol/v1/grant_facts.ex#L1)

Closed value-bearing, redacted, non-authorizing verified grant facts.

## Fields

* `version` - the contract-major, always `1`.
* `issuer` - the verified `iss` claim.
* `grant_id` - the verified `jti` claim.
* `issuer_key_fingerprint` - the raw 32-byte RFC 7638 thumbprint of the trusted issuer public key
  the caller supplied.
* `holder_thumbprint` - the raw 32-byte RFC 7638 thumbprint the grant confirms (`cnf.jkt`).
* `matched_audience` - the expected audience, which the grant's `aud` contains.
* `issued_at` - the grant `iat`, integer Unix time in seconds.
* `not_before` - the grant `nbf`, integer Unix time in seconds.
* `expires_at` - the grant `exp`, integer Unix time in seconds.
* `authorization` - always `:not_evaluated`: these facts are never an authorization decision.

# `t`

```elixir
@type t() :: %BoundedAuthorityProtocol.V1.GrantFacts{
  authorization: :not_evaluated,
  expires_at: integer(),
  grant_id: binary(),
  holder_thumbprint: binary(),
  issued_at: integer(),
  issuer: binary(),
  issuer_key_fingerprint: binary(),
  matched_audience: binary(),
  not_before: integer(),
  version: 1
}
```

Facts from a verified grant.

---

*Consult [api-reference.md](api-reference.md) for complete listing*