Namespaces
The Namespaces page lists all namespaces you own and lets you claim new ones.
Namespace Types
| Type | Format | Who can claim |
|---|---|---|
| Community | x.yourname | Any pyhall account |
| Org | org.acmecorp | GitHub org admin (verified) |
Your tier determines how many namespaces you can claim. Free accounts get one community namespace. Paid tiers unlock more, and org namespaces are available on Org Starter and above.
Claiming a Namespace
- Click Claim a namespace on the Namespaces page.
- Choose the type: x.* (community) or org.* (organization).
- Enter a slug — lowercase letters, numbers, and hyphens only.
- For org namespaces, enter the GitHub organization name. You must be an admin of that org.
- Click Claim. The namespace is immediately active.
The full namespace name is shown as a preview before you submit (e.g., x.yourslug).
Namespace List
Each row in the namespace list shows:
- Prefix — the full namespace identifier (e.g.,
x.alice) - Type — Community or Org
- Sessions — count of active Hall enrollment sessions
- Workers — count of registered (non-retired) workers
- Status — Active or Inactive
- Manage link — opens the namespace detail view
Namespace Detail
Clicking Manage on a namespace opens the detail view, which has two tables:
Hall Enrollment Sessions
Lists every Hall enrollment session for this namespace. Each row shows:
- Session ID (truncated)
- Enrolled timestamp
- Expiration timestamp
- Last poll timestamp
- Status — Active (not expired, polling) or Expired
Sessions expire automatically. When a Hall API instance re-enrolls, it gets a new session. Old sessions remain visible for auditing.
Registered Workers
Lists every worker registered under this namespace. Each row shows:
- Worker ID (fully qualified, e.g.,
x.alice.handler-v1) - Display name
- Status — Active or Retired
- Attestation status — Attested or Not attested
- Registration date
Click a row to expand the worker detail panel, which shows the full record including description, registration IP, and retirement reason (if applicable).
Recovery Code Banner
The first time you log in after claiming a namespace, a recovery code banner may appear. This is a one-time code used for emergency operations (e.g., marking a compromised worker). Copy and store it somewhere safe. The code is shown only once per rotation.
Team Members (Org Namespaces, RBAC-enabled tiers)
On org namespaces with RBAC-enabled tiers, the namespace detail view also shows a Team section:
- Owner — full control (you)
- Publisher — can register workers and manage API keys
- Viewer — read-only access
Invite team members by email from the Team section. They’ll receive a link to accept the invite. Invites expire after 7 days. Remove a member by clicking Remove next to their name.