🔐Boundary Access ControlPosts belong to access groups called boundaries. Only members of a matching group can read them.
🪪OAuth EnrollmentUsers enroll via standard ATprotocol OAuth. An enrollment record is published to their PDS for endpoint discovery.
🔗Private Record ReadsApps find the right service through enrollment records and receive full posts only after an access check.