StratosPrivate permissioned data for ATprotocol

Store boundary-scoped records off the firehose, serve them through the protocol.

🔐

Boundary Access Control

Records carry domain boundaries. A viewer can only access content when they share at least one boundary with the record.

🪪

Users enroll via standard ATprotocol OAuth. An enrollment record is published to their PDS for endpoint discovery.

🔗

Minimal stub records on the PDS carry a source field. Appviews resolve full content from Stratos with boundary checks.