StratosPrivate permissioned data for ATProtocol

Store boundary-scoped records off the PDS, serve them through AppViews with cryptographic access control.

🔐

Boundary Access Control

Records carry domain boundaries. A viewer can only access content when they share at least one boundary with the record.

🪪

Users enroll via standard ATProtocol OAuth. An enrollment record is published to their PDS for endpoint discovery.

🔗

Minimal stub records on the PDS carry a source field. AppViews resolve full content from Stratos with boundary checks.

🔑

Every enrollment is attested by the service signing key over a DAG-CBOR payload, enabling offline verification.