[{"data":1,"prerenderedAt":315},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims":97,"docs-surround-\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims":310},[4],{"title":5,"path":6,"stem":7,"children":8,"page":48},"En Gb","\u002Fen-gb","en-gb",[9,53,59,65,71,81,91],{"title":10,"path":11,"stem":12,"children":13},"Architecture","\u002Fen-gb\u002Farchitecture","en-gb\u002Farchitecture\u002Findex",[14,15,19,23,27,31,35,39,49],{"title":10,"path":11,"stem":12},{"title":16,"path":17,"stem":18},"Identity","\u002Fen-gb\u002Farchitecture\u002Fidentity","en-gb\u002Farchitecture\u002F1.identity",{"title":20,"path":21,"stem":22},"Organisations","\u002Fen-gb\u002Farchitecture\u002Forganisations","en-gb\u002Farchitecture\u002F2.organisations",{"title":24,"path":25,"stem":26},"Roles","\u002Fen-gb\u002Farchitecture\u002Froles","en-gb\u002Farchitecture\u002F3.roles",{"title":28,"path":29,"stem":30},"Domains and claims","\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims","en-gb\u002Farchitecture\u002F4.domains-and-claims",{"title":32,"path":33,"stem":34},"Access","\u002Fen-gb\u002Farchitecture\u002Faccess","en-gb\u002Farchitecture\u002F5.access",{"title":36,"path":37,"stem":38},"Invitations and requests","\u002Fen-gb\u002Farchitecture\u002Finvitations-and-requests","en-gb\u002Farchitecture\u002F6.invitations-and-requests",{"title":40,"path":41,"stem":42,"children":43,"page":48},"Data model","\u002Fen-gb\u002Farchitecture\u002Fdata-model","en-gb\u002Farchitecture\u002F7.data-model",[44],{"title":45,"path":46,"stem":47},"ZoneAudit","\u002Fen-gb\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","en-gb\u002Farchitecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":50,"path":51,"stem":52},"Shared records","\u002Fen-gb\u002Farchitecture\u002Fshared-records","en-gb\u002Farchitecture\u002F8.shared-records",{"title":54,"path":55,"stem":56,"children":57},"Glossary","\u002Fen-gb\u002Fglossary","en-gb\u002Fglossary\u002Findex",[58],{"title":54,"path":55,"stem":56},{"title":60,"path":61,"stem":62,"children":63},"Guides","\u002Fen-gb\u002Fguides","en-gb\u002Fguides\u002Findex",[64],{"title":60,"path":61,"stem":62},{"title":66,"path":67,"stem":68,"children":69},"Products","\u002Fen-gb\u002Fproducts","en-gb\u002Fproducts\u002Findex",[70],{"title":66,"path":67,"stem":68},{"title":72,"path":73,"stem":74,"children":75},"Technology","\u002Fen-gb\u002Ftechnology","en-gb\u002Ftechnology\u002Findex",[76,77],{"title":72,"path":73,"stem":74},{"title":78,"path":79,"stem":80},"Why we publish this","\u002Fen-gb\u002Ftechnology\u002Fwhy-we-publish-this","en-gb\u002Ftechnology\u002F1.why-we-publish-this",{"title":82,"path":83,"stem":84,"children":85},"Trust","\u002Fen-gb\u002Ftrust","en-gb\u002Ftrust\u002Findex",[86,87],{"title":82,"path":83,"stem":84},{"title":88,"path":89,"stem":90},"Data governance","\u002Fen-gb\u002Ftrust\u002Fdata-governance","en-gb\u002Ftrust\u002F1.data-governance",{"title":92,"path":93,"stem":94,"children":95},"Updates","\u002Fen-gb\u002Fupdates","en-gb\u002Fupdates\u002Findex",[96],{"title":92,"path":93,"stem":94},{"id":98,"title":28,"body":99,"description":301,"extension":302,"meta":303,"navTitle":304,"navigation":305,"path":29,"roleNote":305,"seo":306,"sitemap":307,"stem":30,"updated":308,"__hash__":309},"docs\u002Fen-gb\u002Farchitecture\u002F4.domains-and-claims.md",{"type":100,"value":101,"toc":291},"minimark",[102,107,111,145,152,155,158,162,165,169,175,242,246,249,274,277,281],[103,104,106],"h2",{"id":105},"claiming-a-domain","Claiming a domain",[108,109,110],"p",{},"An organisation claims a domain to show that it runs it. A Domain manager, or anyone with a higher role, adds the domain. CobraSphere then gives a TXT record to publish.",[112,113,114,127],"table",{},[115,116,117],"thead",{},[118,119,120,124],"tr",{},[121,122,123],"th",{},"Record",[121,125,126],{},"Value",[128,129,130],"tbody",{},[118,131,132,140],{},[133,134,135,136],"td",{},"TXT at ",[137,138,139],"code",{},"_cobrasphere.\u003Cdomain>",[133,141,142],{},[137,143,144],{},"cobrasphere-verify=\u003Ctoken>",[108,146,147,148,151],{},"For the domain example.com the record goes at ",[137,149,150],{},"_cobrasphere.example.com",". The token is 32 random characters.",[108,153,154],{},"Only that one name is checked, never the domain itself. So the record does not clash with SPF or other TXT records at the domain, and it works for a domain that points elsewhere with a CNAME.",[108,156,157],{},"Domain names are kept in lower case, without a trailing dot. A name with accented or other non-Latin letters is kept in its punycode form.",[103,159,161],{"id":160},"one-organisation-per-domain","One organisation per domain",[108,163,164],{},"One organisation holds a domain at a time. A claim from a second organisation is refused while another organisation holds the domain. The organisation that holds a domain can hand it over, which ends its claim.",[103,166,168],{"id":167},"claim-statuses","Claim statuses",[170,171,172],"claim-states-diagram",{},[108,173,174],{},"How a claim moves between its four statuses.",[112,176,177,190],{},[115,178,179],{},[118,180,181,184,187],{},[121,182,183],{},"Status",[121,185,186],{},"What it means",[121,188,189],{},"Holds the domain",[128,191,192,205,218,230],{},[118,193,194,199,202],{},[133,195,196],{},[137,197,198],{},"PENDING",[133,200,201],{},"Added. The TXT record has not been found yet",[133,203,204],{},"No",[118,206,207,212,215],{},[133,208,209],{},[137,210,211],{},"VERIFIED",[133,213,214],{},"The record was found. The organisation holds the domain",[133,216,217],{},"Yes",[118,219,220,225,228],{},[133,221,222],{},[137,223,224],{},"FAILING",[133,226,227],{},"A later check did not find the record. The organisation still holds the domain for 14 days",[133,229,217],{},[118,231,232,237,240],{},[133,233,234],{},[137,235,236],{},"ENDED",[133,238,239],{},"Handed over, or the record stayed missing for 14 days. Kept as history",[133,241,204],{},[103,243,245],{"id":244},"checking-again","Checking again",[108,247,248],{},"The records are checked every day.",[250,251,252,256,259,265,271],"ul",{},[253,254,255],"li",{},"A verified domain is checked again once a month.",[253,257,258],{},"A failing domain is checked every day.",[253,260,261,262,264],{},"When a check fails, the claim becomes ",[137,263,224],{}," and the organisation's domain managers are told by email.",[253,266,267,268,270],{},"When the record is found again, the claim is ",[137,269,211],{}," again.",[253,272,273],{},"After 14 days of failing, the claim ends.",[108,275,276],{},"A pending claim can be removed. A claim that holds a domain, or one that has ended, cannot be removed.",[103,278,280],{"id":279},"one-domain-shared","One domain, shared",[108,282,283,284,287,288,290],{},"A claimed domain is the same domain record that ZoneAudit uses. The claim and ZoneAudit share one domain ID, so the products agree on which domain is meant. See ",[285,286,50],"a",{"href":51}," and ",[285,289,45],{"href":46},".",{"title":292,"searchDepth":293,"depth":293,"links":294},"",3,[295,297,298,299,300],{"id":105,"depth":296,"text":106},2,{"id":160,"depth":296,"text":161},{"id":167,"depth":296,"text":168},{"id":244,"depth":296,"text":245},{"id":279,"depth":296,"text":280},"How an organisation proves it runs a domain, with one DNS TXT record.","md",{},null,true,{"title":28,"description":301},{"loc":29},"2026-11-10","gOEd5cSSsUi_JNX7JnQA6Mg-AWY1abz0N9RIr7fNEGw",[311,313],{"title":24,"path":25,"stem":26,"description":312,"children":-1},"Seven roles, from Guest viewer to Owner. Each role includes every role below it.",{"title":32,"path":33,"stem":34,"description":314,"children":-1},"Which CobraSphere products a person may open.",1794331643155]