| AccountCredentialChangeRequiredPayload | Account Credential Change Required (RISC 1.0 Section 2.1): the account identified by the subject was required to change a credential - a forced password change, for instance. The event carries no attributes. |
| AccountDisabledPayload | Account Disabled (RISC 1.0 Section 2.3): the account identified by the subject has been disabled and may be enabled again in the future - the reversible counterpart of AccountPurgedPayload. |
| AccountDisabledPayload.Reasons | The reasons Section 2.3 names. The claim is a free string, so the set is open to values the two parties agree on beyond these. |
| AccountEnabledPayload | Account Enabled (RISC 1.0 Section 2.4): the account identified by the subject has been enabled after a disable. The event carries no attributes. |
| AccountPurgedPayload | Account Purged (RISC 1.0 Section 2.2): the account identified by the subject has been permanently deleted - unlike a disable, there is no future enable to wait for. The event carries no attributes. |
| CredentialCompromisePayload | Credential Compromise (RISC 1.0 Section 2.7): a credential of the subject was found to be compromised - in a data breach, for instance - and the receiver should treat it as burnt. |
| IdentifierChangedPayload | Identifier Changed (RISC 1.0 Section 2.5): the identifier in the subject has changed. The subject MUST be an email or phone_number subject carrying the OLD value, and only the provider authoritative over the identifier should issue the event - a username change at a non-authoritative provider is Recovery Information Changed (Section 2.10) instead. |
| IdentifierRecycledPayload | Identifier Recycled (RISC 1.0 Section 2.6): the identifier in the subject was recycled and now belongs to a DIFFERENT user - the receiver must stop treating it as the old account's. The subject MUST be an email or phone_number subject. The event carries no attributes. |
| OptInPayload | Opt In (RISC 1.0 Section 2.8.1): the account identified by the subject opted into RISC event exchanges and is now in the opt-in state. The event carries no attributes. |
| OptOutCancelledPayload | Opt Out Cancelled (RISC 1.0 Section 2.8.3): the account identified by the subject cancelled a pending opt-out and is back in the opt-in state. The event carries no attributes. |
| OptOutEffectivePayload | Opt Out Effective (RISC 1.0 Section 2.8.4): the opt-out took effect and the account identified by the subject no longer participates in RISC event exchanges - the last event the receiver will see for it. The event carries no attributes. |
| OptOutInitiatedPayload | Opt Out Initiated (RISC 1.0 Section 2.8.2): the account identified by the subject asked to leave RISC event exchanges, but events still flow for a period - the delay exists so a hijacker cannot silence the alarm by opting the victim out immediately. The event carries no attributes. |
| RecoveryActivatedPayload | Recovery Activated (RISC 1.0 Section 2.9): the account identified by the subject activated a recovery flow - a moment attackers favour, which is why it is worth signalling. The event carries no attributes. |
| RecoveryInformationChangedPayload | Recovery Information Changed (RISC 1.0 Section 2.10): the account identified by the subject changed some of its recovery information - a recovery email added or removed, or an identifier change at a provider NOT authoritative over the identifier, which Section 2.5 routes here instead of Identifier Changed. The event carries no attributes. |
| RiscClaimNames | The wire names of the event-specific claims RISC 1.0 defines, spelled exactly as the specification spells them - including the one hyphenated outlier. |
| RiscEventTypes | The event type URIs RISC 1.0 defines (its Section 2), and the one registration call that teaches a receiver's event registry the whole dictionary. |
| SessionsRevokedPayload | Sessions Revoked (RISC 1.0 Section 2.11): all sessions of the account identified by the subject have been revoked. The event carries no attributes. |