Browse lexicons

• at.adsb.aircraft.identity record An aircraft identified by its ICAO 24-bit address. Stores static identity and registration information. Created on first sighting by a receiver.
• at.adsb.broadcast.message record A real-time aircraft state update, broadcast via at.adsb.broadcast.subscribeEvents. Ephemeral — not written to a PDS.
• at.adsb.broadcast.subscribeEvents subscription Ephemeral event stream from a receiver station. Emits batched aircraft operations per poll cycle. Does not write to any repository.
• at.adsb.datalink.message record A captured aircraft datalink message (ACARS, VDL2, or HFDL). These are low-volume, high-value records that represent individual communications between aircraft and ground stations.
• at.adsb.flight.defs defs Shared type definitions for flight-related records in the at.adsb namespace.
• at.adsb.flight.record record A receiver-authored record of an aircraft's transit through the receiver's coverage area. Created on departure. References all contributing batch sightings and the aircraft identity via strongRef for provenance verification.
• at.adsb.receiver.sighting record A batch of aircraft observations from a single receiver covering a configurable time window (default 60 seconds). Contains a manifest of observed aircraft and blobbed telemetry data.
• at.adsb.receiver.station record A declaration of an ADS-B receiver station. One per account, representing a physical receiver contributing aircraft surveillance data to the network.
• at.adsb.receiver.stats record Periodic performance summary for a receiver station. Created at regular intervals (e.g. hourly or daily).
• at.adsb.sync.subscribeEvents subscription Unified relay output stream aggregating aircraft telemetry from multiple at-adsb receiver stations. Re-sequences all station telemetry under a single monotonic cursor with backfill support.
• at.adsb.version.defs defs Shared type definitions for lexicon versioning. Provides a reusable convention for tracking schema revisions and changelogs.
• at.adsb.version.info record Version information for a lexicon in the at.adsb namespace. Published by the namespace authority to the network so consumers can discover the current schema version and its history.

• at.anab.board record A named vote board. Lives in the owner's repo; the record key is the board's URL slug.
• at.anab.idea record A candidate feature idea on an anab.at board. Lives in the board owner's repo.
• at.anab.vote record An upvote of an at.anab.idea record. Lives in the voter's repo.

• at.anypub.prepare procedure Stateless Standard.site preparation. Does not accept authentication credentials or perform PDS writes.

• at.askimut.amaRoot record
• at.askimut.answer record
• at.askimut.answerContent record
• at.askimut.appPermissions permission-set
• at.askimut.graph.block record not from the namespace authority Record declaring a block relationship against another account.
• at.askimut.moderation.suspend record not from the namespace authority App-wide suspension: the subject account cannot submit native Questions on Askimut.
• at.askimut.profile record
• at.askimut.question record

• at.atjam.invitation record An invitation to participate in a round, written by an inviter on their own PDS. The inviter's DID is implicit (the record creator). Required for participation in rounds where round.joinMode is 'hosted' (only the jam organizer can invite) or 'network' (the organizer or any current participant that meets networkGate can invite). Consumers MUST validate that the creator DID is a valid inviter for the referenced round before treating an invitation — and the signup it authorizes — as authoritative.
• at.atjam.jam record A recurring (or one-shot) creative challenge that contains rounds. Identity-bearing container: 'EPTSS-the-project' is one jam; a one-shot game jam is also a jam with a single round.
• at.atjam.playlist record An ordered list of records, authored by the repo owner. Deliberately knows nothing about music — or about any project type, which is why it lives in atjam: items are strongRefs to records of any collection, so one list can hold owned audio, an external song reference, and a record from an app that did not exist when this was written, with no schema change. A reader that does not recognise an item's collection renders the URI and moves on — that is the property that makes this infrastructure rath
• at.atjam.round record A single instance of a jam: an assignment with a deadline that participants sign up for and submit to. State (open / in-progress / closed) is derived from milestones, not stored as an enum.
• at.atjam.signup record A declaration of intent to participate in a specific round. The participant's DID is implicit (the record creator). When the round's joinMode is 'hosted' or 'network', a signup is only valid for readers when it strong-refs an at.atjam.invitation written by a valid inviter. Writers SHOULD key a signup by a hash of the round's at-uri (the first 32 hex chars of its SHA-256) and write it with putRecord, so a person has at most one signup per round; readers MUST still tolerate several signups from on
• at.atjam.submission record A participant's submission to a round. atjam does not host the deliverable; it points at it. The strong way is `payload` — a strong-ref to a record on whichever ATProto app owns the data (plyr.fm track, standard.site post, etc.), which is content-addressed, verifiable, and portable. The fallback is `url` — a plain link, for deliverables that don't live on ATProto yet (an itch.io build, a hosted doc). Prefer payload; `url` is the humble alternative. The lexicon can't express "one-of" across field

• at.atmosynth.arrangement record An arrangement: tracks of clips over one timeline, mixed through busses into a master, with the tempo, the meter and the key it is counted in. Its instruments and effects are patches held inside it whole, and what it took from other people's records it holds as copies that remember where they came from. Parts that other people wrote for it in their own repositories are included by address.
• at.atmosynth.audioClip record A recording as it is placed in an arrangement — cut, faded, warped to the beat — published on its own to be taken into anybody's arrangement.
• at.atmosynth.chain record Effects in order, published on their own to be dropped onto anybody's track or bus.
• at.atmosynth.collection record A collection of synth patches, held in its creator's own repository: a title, a description and the patches it gathers — the creator's own or anybody's — in the order they are listed.
• at.atmosynth.defs defs What the arrangement, its tracks, its clips, its effect chains, its samples and the parts offered to it share: musical time, credit, reuse, and the objects an arrangement holds inline and every one of them also publishes as a record of its own. Time here is counted in ticks, 960 to the beat, a beat being a quarter note whatever the meter says. A patch's own patterns keep the 96 to the beat the patch description counts in, so a pattern copied into a clip is multiplied by ten and loses nothing.
• at.atmosynth.like record A like of a synth patch, held in the liking account's own repository — the shape of app.bsky.feed.like, for a subject that is an at.atmosynth.patch.
• at.atmosynth.module record A reusable synth module: Web Audio nodes wired together, with declared audio and MIDI boundaries, exposed parameters, automation and sample slots. Each published version is its own record; records sharing a moduleId form a series.
• at.atmosynth.noteClip record Notes published on their own — a chord progression, a bassline, a drum groove — to be taken into anybody's arrangement and played by whatever instrument it is placed under.
• at.atmosynth.part record Tracks written for somebody else's arrangement, held in the repository of whoever wrote them. Nobody can write into another account's repository, so a contribution is offered rather than added: it names the arrangement it is for, and becomes part of that arrangement only when the arrangement's creator includes it by address. It stays its writer's, under their name, and what they change in it changes what the arrangement plays.
• at.atmosynth.patch record A synth patch: which modules it uses, how they are wired, what their parameters are set to, and how it is played. A patch plus the module records it pins is everything needed to reproduce it.
• at.atmosynth.patchPresentation record How a patch is drawn: where its blocks stand, and its frames. It is kept beside the patch rather than in it, and nothing in it changes what is heard, so whatever only plays a patch never reads it. A field that only says how a patch is drawn belongs here, never in the patch.
• at.atmosynth.performance record A performance: everything one person or several played together on a patch, in the now, kept whole. Every note, every move of a parameter and every other change to the patch, each by whoever made it, on one timeline, with what it sounded like. Whoever played in it and recorded it keeps it, in their own repository, with everybody else's playing in it; several of them may each keep their own.
• at.atmosynth.sample record A recording published to be found and used: a one-shot, a loop or a longer take, with what is known of its time and pitch. A recording used only inside an arrangement is a blob of that arrangement and needs no record; this is for sharing one.
• at.atmosynth.track record One track published on its own, to be taken into anybody's arrangement: its instrument or recordings, its clips, its effects, its mix and its automation, exactly as an arrangement holds a track.

• at.atpcraft.player.chat record Player chat message records for ATPcraft. Each message sent by a player is stored as a record in their PDS.
• at.atpcraft.player.defs defs Shared definitions for ATPcraft player data records.
• at.atpcraft.player.skin record Server-endorsed player skin and cape references for ATPcraft. Each record is signed by the ATPcraft server that wrote it so other servers can verify the skin.
• at.atpcraft.player.snapshot record Server-endorseable snapshot of a Minecraft player's state. Each endorsement is an Ed25519 signature from one trusted ATPcraft server.
• at.atpcraft.server.profile record Self-published descriptor of an ATPcraft Minecraft server, written by the server into its own repository.

• at.blueharbor.channel record A channel within a harbor. Written by the harbor owner; points at the harbor record. Text channels also host an ad-hoc call; voice channels are call-first.
• at.blueharbor.createSession procedure The lxm named in service-auth JWTs minted for the BlueHarbor backend (aud did:web:blueharbor.at). The backend verifies the JWT against the caller's DID document and exchanges it for a BlueHarbor session token. Defined here so the method identifier resolves; the HTTP call itself is served by the BlueHarbor service, not a PDS.
• at.blueharbor.harbor record A community (harbor). Lives in its founder's repo; its AT-URI is the community's permanent, portable id. The record is a public claim — message access is granted by the harbor's app service.
• at.blueharbor.membership record A user's public claim of membership in a harbor. Only the account holder can write their repo, so the record proves intent and makes the membership graph portable. Access to messages is granted by the harbor's app service, which verifies this record exists; deleting it is leaving. A kick does not touch this record — the service is the access authority.

• at.calend.calendar space A private or shared CalenDat calendar.

• at.celest.temp.actor.profile record The actors profile on Celestat
• at.celest.temp.berry record A record that is obtainable in some level or some pack of levels
• at.celest.temp.level record A level you can play in Celeste
• at.celest.temp.room record A room associated with a level
• at.celest.temp.stats.defs defs One slice of a played level, can be used to represent the deaths/clears in one session, or one clear

• at.colocate.comment record not from the namespace authority
• at.colocate.group space not from the namespace authority A public or private community discussion group.
• at.colocate.moderation record not from the namespace authority
• at.colocate.permissions permission-set Permissions for creating groups and participating in group conversations.
• at.colocate.post record not from the namespace authority
• at.colocate.reaction record not from the namespace authority

• at.corkboard.alpha.repost record Record declaring a 'repost' of a community calendar event. Points at the canonical community.lexicon.calendar.event record on another account, mirroring app.bsky.feed.repost.

• at.dholms.bulletin.board space not from the namespace authority A personal board where followers can read and post notes.
• at.dholms.bulletin.label record not from the namespace authority An authority-authored moderation label kept inside the board's access boundary.
• at.dholms.bulletin.permissions permission-set not from the namespace authority
• at.dholms.bulletin.position record not from the namespace authority A board-owner position override for a specific version of a note.
• at.dholms.bulletin.post record

• at.dropb.authManageFiles permission-set
• at.dropb.file record A file

• at.ellich.agent.document record
• at.ellich.agent.memory record
• at.ellich.agent.message record
• at.ellich.agent.session record
• at.ellich.agent.space space
• at.ellich.agent.summary record
• at.ellich.chat.context record
• at.ellich.chat.message record
• at.ellich.chat.room record
• at.ellich.chat.space space

• at.eptss.ballot record A voter's public attestation: 'I voted on this ballot sheet.' Written to the voter's own repo. The ledger strongRef pins the exact candidateLedger (URI and CID) the vote was cast against, making post-hoc ledger edits detectable. Scores are never public: privateRef resolves only through the round organizer's private sidecar.
• at.eptss.candidateLedger record The round's ballot sheet, revealed as one atomic record when signups close. Published by the round organizer. The candidate list itself lives in an at.atjam.playlist of at.eptss.track records — this record pins that playlist by CID and adds only what a playlist must never carry: round attribution and who nominated what. Ballots strong-ref this ledger, so the pin chain runs ballot → ledger → playlist → tracks, and a post-hoc edit anywhere is detectable. Attribution keys on the track's AT-URI, nev
• at.eptss.song object A song, used inline (with $type) as an at.atjam.round subject or inside at.eptss records. Not a standalone record.
• at.eptss.track record One song, published so anything can point at it. Written by the round organizer at ledger-publish time — never at nomination time, which would reveal a nomination the reveal design exists to hold back. Holds only identity: this record is CID-pinned by the round's candidate ledger and therefore frozen, so anything that might later be corrected (links, MBIDs, durations) belongs in records that point here instead — see at.eptss.trackLink. Written fresh per round rather than reused across rounds: sh
• at.eptss.trackLink record An assertion that a track plays at a URL, written by anyone, about any track, and never editing the track it is about. There is at least one of these per platform per song, which is exactly why the URL cannot live on the track itself. Prefer a deterministic rkey so re-running an importer upserts instead of piling up.
• at.eptss.voteResult record Aggregate (anonymous) vote result for one candidate in one round, published by the organizer after voting closes. Individual scores are never published. The candidate is a strongRef to its at.eptss.track — one shape for a song across the whole system, not an embedded copy that goes stale. Integers only (count + total; clients divide) because DAG-CBOR forbids floats. The scale is self-describing: distribution has (scaleMax - scaleMin + 1) buckets, distribution[0] = count of scaleMin scores.

• at.functions.metadata record A WebAssembly function registered on AT Protocol
• at.functions.recipe record A recipe — invented on the spot to prove AT Search can index a lexicon it has never seen.
• at.functions.run procedure Invoke a registered AT Function
• at.functions.workflow record A named workflow that chains AT Functions, passing outputs as inputs between steps.

• at.glean.annotation record Reading note on a specific RSS article.
• at.glean.like record Like an RSS article.
• at.glean.subscription record A single RSS feed subscription.

• at.happyproto.actor.acceptInvite procedure Redeem an invite from admin.createInvites: the caller joins the customers space with read access, and the address the invite went to is paired with the caller's account. Redeeming as an account that is already a customer succeeds and spends nothing. Any signed-in account may call this; the token is the authority.
• at.happyproto.actor.acceptTerms procedure Record that the caller accepted the beta terms in force for their account, with the exact wording they were shown. The dashboard calls it from the terms screen after sign-in. Accepting terms already accepted records nothing new. Each acceptance is kept, append-only. Customers and staff; anyone else is refused.
• at.happyproto.actor.getAccount query Whether the caller is a HappyProto customer, and how many instances they have of how many allowed. Any signed-in caller; a non-customer gets zeros.
• at.happyproto.actor.getProfile query Get an actor's profile. Returns full detail — including dashboard entitlements — only for the authenticated caller; for any other actor it returns public basics only.
• at.happyproto.actor.getTerms query Whether the caller has accepted the beta terms in force. The dashboard asks after each sign-in and shows the terms until the caller accepts them with acceptTerms: once per account, and again whenever the terms change. createInstance is refused until then. Customers and staff; anyone else is refused.
• at.happyproto.actor.syncAccount procedure Record the email address on the caller's PDS account with HappyProto, read server-side from their PDS session. The dashboard calls it once after each sign-in. The PDS reports the address only when the sign-in granted it (transition:email or account:email); without one, the last recorded address is kept, and an unconfirmed address never replaces a confirmed one. The address itself is never returned. Customers and staff; anyone else gets recorded = false.
• at.happyproto.admin.addCustomer procedure Make an account a customer: add it to the customers space with read access. Adding an existing member succeeds and changes nothing. Staff only.
• at.happyproto.admin.cancelHostRequest procedure Cancel a host request and remove its server and volume. confirm must be the request's host name. Staff only.
• at.happyproto.admin.createInvites procedure Invite customers: mint one single-use customers-space invite per address, each expiring after expiresInDays, and record which address each went to, so a redeemed invite pairs the address with the account. Redeemed with actor.acceptInvite. Staff only.
• at.happyproto.admin.createSpaces procedure Create HappyProto's admin and customers spaces, member-only, keeping either that already exists, and add each of staff to the admin space with write access, skipping existing members. Each space is looked up at the uri its script variable (HAPPYPROTO_ADMIN_SPACE, HAPPYPROTO_CUSTOMERS_SPACE) names, or, unset, under HAPPYPROTO_DID. A space created here has a DID of its own, and the uri answered is the one to set its variable to. Idempotent once the variables are set: a second call creates nothing
• at.happyproto.admin.defs defs The autoscaler's settings and what it is waiting on.
• at.happyproto.admin.getAutoscale query The autoscaler: on or paused, how many hosts it may add, what it is waiting on, and free capacity against its thresholds. Staff only.
• at.happyproto.admin.getEncryptionKey query Where an instance's encryption key is in its rotation, and whether a rotation can start now. Staff only.
• at.happyproto.admin.getFleet query Every host, and every tenant with its host, plan, owner and latest metered hour, for the staff fleet view. Staff only.
• at.happyproto.admin.getHostRequest query One host request with its timeline, oldest event first. Staff only.
• at.happyproto.admin.listCustomers query The members of the customers space: everyone the customer endpoints admit. Staff only.
• at.happyproto.admin.listHostRequests query The autoscaler's host requests, newest first, without their timelines. Staff only.
• at.happyproto.admin.listHosts query Every host, with what its tenants hold. Staff only.
• at.happyproto.admin.listInstances query Every instance, whoever owns it, with its placement. Staff only.
• at.happyproto.admin.listInvites query Every customer invite, newest first: the address it went to, whether it is pending, expired or redeemed, and by which account. Staff only.
• at.happyproto.admin.listJobs query Background jobs across every user, newest first. Staff only.
• at.happyproto.admin.removeCustomer procedure Stop an account being a customer: remove it from the customers space. Removing a non-member succeeds. Staff only.
• at.happyproto.admin.retryHostRequest procedure Start a failed host request again. The workflow skips what already exists, so a retry never orders a second server. Staff only.
• at.happyproto.admin.rotateEncryptionKey procedure Give an instance a new encryption key. The old key stays beside it while HappyView re-seals what it sealed, and is then retired on its own. Staff only.
• at.happyproto.admin.setAutoscalePaused procedure Pause or resume the autoscaler. Pausing stops new host requests; one under way carries on. Staff only.
• at.happyproto.fleet.getAdoption query Per-subsystem feature adoption, ever-used against active now. Admin only.
• at.happyproto.fleet.getBenchmarks query Where one instance sits in its size cohort. Withheld below a cohort of 10: a percentile over fewer is not an aggregate, it is individual data with a statistic drawn over it. Admin only.
• at.happyproto.fleet.getCapacity query Store capacity: the latest totals, a daily trend, per-collection counts and what each tenant holds. Proxied from the provisioner. Admin only.
• at.happyproto.fleet.getCostShape query Disk and memory distribution, and bytes per record. Memory is reported as separate anonymous and file-backed figures and is never totalled. Admin only.
• at.happyproto.fleet.getGrowth query Fleet and per-instance growth rates from instance_daily_deltas. Counter resets are excluded by the view, so a wiped volume lowers no rate. Admin only.
• at.happyproto.fleet.getHostMix query Categorical host facts across the fleet, with consent coverage. Keys whose values vary per instance, or that carry embedded documents, are named but not enumerated. Admin only.
• at.happyproto.fleet.getIngestHealth query Report lag, clock skew and schema-version spread. Lag and skew are separate facts and must not be averaged together. Admin only.
• at.happyproto.fleet.getLexiconShape query Lexicon counts and top-collection concentration. Reads tier-1 shape only; consent-gated lexicon names are not read here. Admin only.
• at.happyproto.fleet.getResets query Counter resets — the negative deltas instance_daily_deltas discards. A reset is a restored backup, a wiped volume, a re-provision or a wrong clock. Admin only.
• at.happyproto.fleet.getRetention query Survival by first-seen cohort. Manual-mode instances are excluded: they have no reporting cadence to miss, so their silence is not churn. Admin only.
• at.happyproto.fleet.getSignals query Fleet-wide failure signals, derived from each instance's most recent snapshot. Admin only.
• at.happyproto.fleet.getTenantIngestMetrics query How any tenant handled incoming records in a window, by collection and action. The same shape as server.getIngestMetrics. Admin only.
• at.happyproto.fleet.getTenantScriptMetrics query How any tenant's scripts ran in a window: every script that ran, or with trigger, one script's series. The same shape as server.getScriptMetrics. Admin only.
• at.happyproto.fleet.getTenantUsage query One tenant's metered usage by hour or day, with the hours that have no report. Proxied from the provisioner. Admin only.
• at.happyproto.fleet.getVersions query HappyView version distribution and upgrade lag. Admin only.
• at.happyproto.fleet.listInstances query The reporting fleet, one row per instance, from its most recent snapshot. Admin only.
• at.happyproto.plugin.profile record A HappyView plugin package, in its publisher's repo. The record key is the package slug, so the slug is immutable: changing it means a different package.
• at.happyproto.plugin.release record One version of a package. The record key is '<slug>:<version>'. A release at a given version is never modified: a registry that later sees a different CID at this key keeps the first and flags the conflict.
• at.happyproto.plugin.releaseExtension object The HappyView-specific half of a release, carried at extensions['at.happyproto.plugin.releaseExtension']. It is the plugin manifest, moved into the signed record so a consent screen renders without downloading the module. It is not trusted: the loader checks it against the module's plugin_info export and its import section, so a release that misstates what its WASM does is refused exactly as a checksum mismatch is.
• at.happyproto.plugin.v1 object A HappyView plugin, as one entry in a software.release.manifest's `artifacts`. It carries the module and its manifest.json as blobs, so they are verified by their CIDs, and the manifest's facts in the signed record, so a consent screen renders without downloading the module. Those facts are not trusted: the loader checks them against the module itself and refuses a plugin that misstates what it does. The registry refuses a manifest whose artifact breaks a rule stated here, including the ones a l
• at.happyproto.registry.defs defs The version's changelog, from the registry's copy of its site.standard.document.
• at.happyproto.registry.getArtifact query The bytes of a blob the registry has copied, served from its own copy and never redirected to the publisher, so a version stays installable after its publisher deletes it. Name the blob either by version and kind or by its CID. Only blobs that an indexed manifest or publication references are served. The output encoding is `*/*`, as com.atproto.sync.getBlob's is; the media type is the one the blob was published with.
• at.happyproto.registry.getPackage query One package by publisher and slug. A withdrawn package is still returned, flagged `deleted`, because its releases stay resolvable.
• at.happyproto.registry.getProject query One plugin, by publisher and name.
• at.happyproto.registry.getRelease query One release by exact version. Served whatever its status, including `deleted`: that is the left-pad protection the registry exists for.

38 more under at.happyproto ›

• at.inlay.Binding procedure Data placeholder resolved by the host during deserialization.
• at.inlay.Fragment procedure Renders children without a wrapper element.
• at.inlay.Loading procedure Shows fallback content while children are loading.
• at.inlay.Maybe procedure Renders children if all bindings resolve; otherwise renders fallback.
• at.inlay.Missing procedure Signals missing data. Components return this when a required value is absent.
• at.inlay.Slot procedure Opaque reference to a stashed element during XRPC calls.
• at.inlay.Throw procedure Error node produced when component resolution fails. The host decides how to render it.
• at.inlay.authFullPermissions permission-set
• at.inlay.canvas record Canvas - a spatial arrangement of component windows.
• at.inlay.component record Component record. The rkey is the type NSID this component implements.
• at.inlay.defs defs Cache lifetime and invalidation tags returned by XRPC components.
• at.inlay.endpoint record Endpoint record. Declares that a DID serves a given XRPC method. The rkey is the method NSID.
• at.inlay.pack record A list of type to component exports
• at.inlay.profile record Inlay user profile.

• at.isnot.authManageReviews permission-set
• at.isnot.review record A person's review of one thing: which adjectives it is, and is not. One record per subject and locale per repo; update it rather than creating another. If a repo ever holds more than one review of the same subject in the same locale, merge them into the earliest-created one (tag conflicts: latest updatedAt wins, then direction nearer 0, then positive) and delete the rest.
• at.isnot.suggestSubjects query Suggest review subjects whose title matches a search string, most-reviewed first.

• at.kotoba.fullPermissions permission-set
• at.kotoba.lesson.pack record Lesson content the app drills. Append-only stack; latest = active. Free-form by design: a known core the UI reads + open `meta`/`defaults` round-tripped untouched (SPEC §3.1a). This record body IS the upload interchange shape (lessons/pack.schema.json).
• at.kotoba.prefs record Single overwritten record: per-user UI/drill preferences. The payload is an opaque JSON string so preferences expand without a lexicon change. rkey is literally `self`.
• at.kotoba.session record One practice session: the full per-card interaction array, the config that drove it, and session-level rollups. Append-only stack; TID rkeys (time-ordered).
• at.kotoba.state record Single overwritten record: per-glyph SRS state + the directed confusion map. Read once at startup; overwritten on flush. rkey is literally `self`.
• at.kotoba.stats record Single overwritten record: an incremental rollup of the session history, so a normal load doesn't have to cursor-walk every session ever recorded (#16). rkey is literally `self`.

• at.ligo.authFull permission-set

• at.locale.comment record Threaded discussion on a key, a translation, or a locale. Author-owned.
• at.locale.memberRequest record A request to join a project. Requester-owned.
• at.locale.membership record A project role grant, optionally scoped to locales. Owner-authored.
• at.locale.project record A localization project pointing at a source repo. Maintainer-owned.
• at.locale.review record A verdict on a translation revision. Reviewer-owned.
• at.locale.translation record A translation of one source key in one locale. Translator-owned.

• at.mapped.activity record An activity like Hiking, Cycling, Kayaking
• at.mapped.location object A physical location in the form of a WGS84 coordinate.
• at.mapped.member record A registered mapped.at member. Stored on the service account repo.
• at.mapped.post record A post representing either an activity or a travel experience
• at.mapped.profile record A user's mapped.at profile. Singleton record — rkey is always 'self'.
• at.mapped.trail record A trail

• at.margin.apikey record An API key hash for the Margin application.
• at.margin.authFull permission-set
• at.margin.collection record A collection of annotations (like a folder or notebook)
• at.margin.collectionItem record An item in a collection (links annotation to collection)
• at.margin.like record A like on an annotation or reply
• at.margin.note record W3C Web Annotation Data Model compliant unified note record for ATProto
• at.margin.preferences record User preferences for the Margin application.
• at.margin.profile record A profile for a user on the Margin network.
• at.margin.readingRoom record A user's public reading room configuration
• at.margin.reply record A reply to an annotation or another reply

• at.markpub.facets.baseBlocks object Specifies the sub-string range a facet feature applies to. Start index is inclusive, end index is exclusive. Indices are zero-indexed, counting bytes of the UTF-8 encoded text. NOTE: some languages, like Javascript, use UTF-16 or Unicode codepoints for string slice indexing; in these languages, convert to byte arrays before working with facets. Byte slices can overlap.
• at.markpub.facets.baseFormatting object Specifies the sub-string range a facet feature applies to. Start index is inclusive, end index is exclusive. Indices are zero-indexed, counting bytes of the UTF-8 encoded text. NOTE: some languages, like Javascript, use UTF-16 or Unicode codepoints for string slice indexing; in these languages, convert to byte arrays before working with facets. Byte slices can overlap.
• at.markpub.lens object
• at.markpub.markdown object
• at.markpub.text object

• at.marque.authFull permission-set
• at.marque.dns record DNS zone records for a domain where Marque handles the nameservers. Stored in the user's repository.
• at.marque.dns.getDsRecords query Get the DNSSEC DS records for a managed zone.
• at.marque.dns.getRecords query Get the active DNS records for a managed zone.
• at.marque.domain record A domain registration managed by Marque. Stored in the user's repository.
• at.marque.partner.checkAvailability query Check availability and pricing for a batch of domains, for partner integrations.
• at.marque.partner.createCheckout procedure Create a hosted payment checkout to register one or more domains for the calling user.
• at.marque.partner.getOrder query Get the status of a partner checkout order and the resulting domain details.
• at.marque.partner.getRequirements query Load registry-specific registration requirements for partner checkouts.
• at.marque.partner.listPricing query List the TLDs Marque offers and their prices, for partner integrations.
• at.marque.partnerApi permission-set
• at.marque.team record A team for a single domain managed by Marque, owned by the domain owner. Stored in the owner's repository.
• at.marque.team.member record An accepted team member grant, authored by the domain owner. Stored in the owner's repository.
• at.marque.team.membership record An acceptance receipt for a team membership, authored by the member. Stored in the member's repository.

• at.mecenas.creator record The public Mecenas membership page owned by the repository DID.
• at.mecenas.membership space One creator-controlled entitlement boundary for a Mecenas membership tier.
• at.mecenas.post record A Mecenas creator post. Repository or Space placement determines its access boundary.
• at.mecenas.tier record A public description of a creator membership tier; it is not canonical billing state.

• at.meme-museum.collection record A named board/folder of memes, e.g. "reactions" or "cat pics". Membership is recorded separately via at.meme-museum.collectionItem, not inline here.
• at.meme-museum.collectionItem record Membership of one meme in one collection. One record per (collection, meme) pair, mirroring the app.bsky.graph.list/listitem split rather than an inline member array -- see docs/data-model.md.
• at.meme-museum.meme record A single meme asset (still image, animated image, or short video clip) in a user's library.

• at.noted.folder space A collection of notes
• at.noted.link record A link to a resource on the web
• at.noted.note record A brief note
• at.noted.place record A place with a review
• at.noted.post record A post on a website
• at.noted.radio.host record A host of a radio show
• at.noted.radio.play record A play of a track on a radio show
• at.noted.radio.program record A radio program
• at.noted.radio.show record A radio show

• at.nsid.cobalt.label.createLabel procedure Generates and persists a single new label. Overwrites any existing label with the same (src, uri, cid, val).
• at.nsid.cobalt.label.defs defs Request body for creation/negation of a label
• at.nsid.cobalt.label.negateLabel procedure Generates and persists a single new label, which negates (and overwrites) any previous label with the same (src, uri, cid, val).

• at.pasteb.authManagePastes permission-set
• at.pasteb.paste record A paste

• at.pocketfeed.authFullPermissions permission-set
• at.pocketfeed.subscription record Pocket feed subscription

• at.podping.records.podping record Normalized podping fields, supporting podping v0 through v1.1. Record TID timestamp should represent when the event was received, useful for global ordering.
• at.podping.records.startup record Normalized podping startup fields. Record TID timestamp should represent when the event was received, useful for global ordering.

• at.postgame.badge record A badge earned by a user, awarded by the postgame system based on activity
• at.postgame.follow record A follow relationship between two postgame users
• at.postgame.game record A game in a user's collection
• at.postgame.libraryRequest record A request to add a game to the user's library, written by an automation (e.g. an Airglow rule that fires when the user replies "backlog" to a Bluesky post) rather than by postgame. postgame resolves the game from the subject's postgame.at game link the next time the user signs in, writes the at.postgame.game record, and deletes the request.
• at.postgame.list record A ranked list of games created by a user
• at.postgame.list.item record not from the namespace authority A single game entry within a user's list
• at.postgame.love record A game the user loved. Lists may also be loved in the future, but only games are supported today. The record key is deterministic so a subject can only be loved once: 'game-{igdbId}' for games, 'list-{rkey}' (the rkey of the at.postgame.list record) for lists
• at.postgame.settings record User settings for postgame

• at.protocube.authFull permission-set not from the namespace authority
• at.protocube.getPath query Read one at.protocube.path record by repository and record key from the protocube AppView.
• at.protocube.getSeries query Read one at.protocube.series record by repository and record key from the protocube AppView.
• at.protocube.getWalkthrough query Read one at.protocube.walkthrough record by repository and record key from the protocube AppView.
• at.protocube.getWalkthroughLikes query Count at.protocube.like records for one walkthrough and report whether the viewer liked it. An unknown walkthrough is a zero count, not an error.
• at.protocube.like record not from the namespace authority
• at.protocube.listRecords query List protocube records by tag (feed/tag pages, newest-indexed first) or by repository (author pages, descending record key).
• at.protocube.path record not from the namespace authority
• at.protocube.series record not from the namespace authority
• at.protocube.walkthrough record not from the namespace authority

• at.rolld.defs defs Image dimensions in pixels (1:1 with app.bsky.embed.defs#aspectRatio shape).
• at.rolld.play record A single logged session of playing a board game. The high-volume event record. Reads ('times played', 'who played this game') are served by querying Constellation for backlinks to the 'target' URL — derived live, never stored.
• at.rolld.profile record A single per-user record (key 'self') that declares 'this account uses rolld'. Its PRESENCE is the signal that an account participates, so the friends-feed can cheaply find which of a user's follows to fetch (query for this record across follows, then read plays only for those who have it). Its DELETION is a clean opt-out. Holds optional lightweight display preferences; the authoritative bio/avatar still come from app.bsky.actor.profile, not here. Modeled on atmot's stats record doing the same d
• at.rolld.rating record The user's grade for a game. Single overwritable record per game (BGG id in the record key); re-rating replaces it, no history kept in v1. Scale is 1-10 to align with BGG's community average you already hydrate.

• at.secretsky.connections space not from the namespace authority A private, owner-only space containing this account's SecretSky follows.
• at.secretsky.feed space not from the namespace authority A private personal feed shared only between reciprocal SecretSky follows.
• at.secretsky.follow record not from the namespace authority
• at.secretsky.permissions permission-set
• at.secretsky.post record not from the namespace authority
• at.secretsky.reaction record not from the namespace authority
• at.secretsky.removal record not from the namespace authority An owner-authored moderation record for a post in their feed.

• at.smiled.reaction record Reactions in the atmosphere.

• at.sovrn.mail.defs defs Shared types of the mail records sovrn copies to a person's Atmosphere account (at.sovrn.mail.email, at.sovrn.mail.mailbox).
• at.sovrn.mail.email record One message in a mirrored mail folder, after the JMAP Email (RFC 8621 §4), with the raw RFC 5322 message as a blob. Content is immutable. Header fields longer or more numerous than the limits here are shortened; raw always has the whole message. The record key is the base32 (lowercase, unpadded) of the first 20 bytes of the raw message's SHA-256, so it is the same in every folder and can be recomputed from an export. The folder is the space, so there is no mailboxIds; keywords are not mirrored.
• at.sovrn.mail.mailbox record The mail folder a mirrored-mail space holds, after the JMAP Mailbox (RFC 8621 §2). One per space, written by sovrn as the user. The space key is only a readable slug; this record has the exact names.
• at.sovrn.space.emailCopy permission-set
• at.sovrn.space.mailbox space A private copy of one folder of your sovrn email, kept up to date by sovrn. It isn't public and isn't shared with anyone unless you choose to.

• at.tasked.account record A public declaration that the user account uses TaskedAT.
• at.tasked.note record A private text note in the owner's TaskedAT workspace.
• at.tasked.notes space An owner-only workspace for private notes and tasks.
• at.tasked.task record A private actionable item belonging to a TaskedAT task list.
• at.tasked.taskList record A private ordered task list.
• at.tasked.tasked.notes space An owner-only workspace for private notes and tasks.
• at.tasked.tasked.notesNote record A private text note in the owner's TaskedAT workspace.
• at.tasked.tasked.notesTask record A private actionable item belonging to a TaskedAT task list.
• at.tasked.tasked.notesTaskList record A private ordered task list.

• at.tensei.authFull permission-set What the Tensei appview asks a user's PDS for (spec §1.1), requested as include:at.tensei.authFull beside atproto. One canonical copy, owned by the Tensei account; never written to a user's repo.
• at.tensei.mapping record A Tensei mapping, version 1 (spec §4): records of one source collection mapped into output fields the user authors. Built-in presets are starting points, never a contract: any field name is allowed, and a field is mandatory only when the user marks it `required`. The atproto data model has integers only, so a number in the record is an integer written as it is, or any other number in fixed point, the value times 10⁶ (spec §1.5): a bare integer where this lexicon declares it — a #mappingField's `
• at.tensei.pipeline record A Tensei pipeline, version 1 (spec §6, §7): source nodes reading through mappings, downstream nodes over the fields the user authored, and one output. Shapes on wires are derived from the graph, never stored. The atproto data model has integers only, so a number in the record is an integer written as it is, or any other number as an at.tensei.mapping#fixedPoint, the value times 10⁶ (spec §1.5). Where the lexicon language cannot state a rule the version-1 validator enforces, the property is left
• at.tensei.subscription record A subscription to a pipeline the subscriber owns (spec §1.1, §1.3).

• at.turtleme.authPlay permission-set
• at.turtleme.chat.clan space A turtle meat clan: a chat channel held in an atproto permissioned space, readable only by the people its owner has let in. It is anchored on the owner's DID, and its key is the clan's name: lowercase letters, digits and hyphens, so an account can run several and a player joins one by its owner and name, as in alice.bsky.social/turtlers. Its lines are at.turtleme.chat.message records whose room is the space's own at:// URI.
• at.turtleme.chat.message record A single message sent to a turtle meat chat room. Messages live in the author's own repository; a room is assembled by reading the backlinks that point at it.
• at.turtleme.game.buy procedure Buy from the shop's shelf. The price is not a parameter: a shelf's price moves with what it is holding, and a client that could quote its own would buy a shop out at the price of the first item. The counter takes what there is and what the coins run to rather than refusing the lot, so fewer may be bought than were asked for. Requires an atproto service auth token addressed to did:web:turtleme.at#turtle_game and naming this method, so a token issued for one call cannot be spent on another.
• at.turtleme.game.cast procedure Cast out and start a run of strikes. The reply carries the seed every window of the run is drawn from, so the page can render the bar without being able to widen it or move the gold sliver. A cast while the water is still resting is refused. A cast while a run is still being played hands that run back, streak, strikes left and all, rather than starting another, so a page that lost sight of a run carries on with it and leaving a cast hanging is still not a way to fish without ever resting. A run
• at.turtleme.game.castReef procedure Anchor over a fresh reef. The board is made empty and the shoal goes down on the first sweep, clear of it, so the patch a round opens with is never the one that ends it. A patch named with the cast is that first sweep, settled in the same call, and the outcome carries what it opened as sweepReef's would. Where the shoal lies is never sent: the whole reason this is settled here is that a board laid out in the page is a board whose shoal is sitting in memory. Anchoring over a board that is still b
• at.turtleme.game.castSpot procedure Stand over a fishing spot. Casting at one that has not yet wandered off does not move it, the same way setting a net that is already out does not restart it. When a spot leaves is drawn from the moment it arrived, so the page and turtle meat work out the same answer and neither has to tell the other. Requires an atproto service auth token addressed to did:web:turtleme.at#turtle_game and naming this method, so a token issued for one call cannot be spent on another.
• at.turtleme.game.cook procedure Put one raw sea turtle on the range. One call, one roll, one result: whether it burnt is turtle meat's die and not the caller's. A cook takes four ticks, and asking again inside that is refused, so the range runs at the speed a range runs at however the button is being pressed. Requires an atproto service auth token addressed to did:web:turtleme.at#turtle_game and naming this method, so a token issued for one call cannot be spent on another.
• at.turtleme.game.defs defs A run of strikes. The seed every window is drawn from, the level the run opened at and the marker's state are all turtle meat's, so a client can draw the bar to the millisecond without being able to widen it, slow it or move the gold sliver.
• at.turtleme.game.exchange procedure Put an offer through the Grand Exchange. The price an offer fills at is the one turtle meat fetched from the Old School RuneScape Wiki, never one the caller sent: a client that could quote its own price would be setting its own exchange rate. What the caller sends is the limit it is willing to trade at, and an offer on the wrong side of the market does not fill, the way it would sit unfilled in the game. Sales are taxed at 2% per item, as they are there. When no price recent enough to trade on c
• at.turtleme.game.fishSpot procedure One cast at the fishing spot. Whether it catches anything, and whether what it catches is a sea turtle, are turtle meat's rolls and not the caller's. A cast takes four ticks and casting again inside that is refused, as is casting at a spot that has already wandered off. Requires an atproto service auth token addressed to did:web:turtleme.at#turtle_game and naming this method, so a token issued for one call cannot be spent on another.
• at.turtleme.game.getState procedure Read a player's own progress, without changing anything. Requires an atproto service auth token addressed to did:web:turtleme.at#turtle_game and naming this method, so a token issued for one call cannot be spent on another.
• at.turtleme.game.haulNet procedure Haul the drift net in, banking whatever elapsed time earned. Hauling an empty net costs nothing and earns nothing. Requires an atproto service auth token addressed to did:web:turtleme.at#turtle_game and naming this method, so a token issued for one call cannot be spent on another.
• at.turtleme.game.leaveReef procedure Up anchor and leave the shoal where it lies. Nothing comes aboard, because a board pays the whole shoal or it pays nothing, and the water wants the same wait it would after any other ending. Requires an atproto service auth token addressed to did:web:turtleme.at#turtle_game and naming this method, so a token issued for one call cannot be spent on another.
• at.turtleme.game.reelIn procedure End a run of strikes early and start the rest. Every way a run can end costs the same minute — running out of strikes, letting the line sit, filling the inventory, reeling in, walking away — because any of them left free would be the strike limit handed back for a click. A run that had already ended by itself, its line left sitting through its idle passes, rests from when it ended rather than from the reeling. Reeling in when there is no run does nothing. Requires an atproto service auth token a
• at.turtleme.game.sell procedure Sell to the shop. What it pays falls as its shelf fills, and never goes under a tenth of what the item is worth. Selling more than is held sells what is held. Requires an atproto service auth token addressed to did:web:turtleme.at#turtle_game and naming this method, so a token issued for one call cannot be spent on another.
• at.turtleme.game.session record One adjudicated session of play, published by the player as a public trail of how their progress was earned. The leaderboard does not need these records; at.turtleme.player.state alone is enough to rank someone. They exist so that progress can be read as a history rather than a number, and so other clients have something to render. Written per session rather than per catch, which keeps a player's repository from growing without limit.
• at.turtleme.game.setNet procedure Put the drift net in the water. Setting a net that is already set does not restart it. Requires an atproto service auth token addressed to did:web:turtleme.at#turtle_game and naming this method, so a token issued for one call cannot be spent on another.
• at.turtleme.game.strike procedure Strike at the marker. The caller says how far into the cast the finger came down, in milliseconds, and nothing else: where the marker was at that moment, which of the run's windows it had laid down on the way, how wide that window is and where the sliver sits in it are all worked out by turtle meat from the run's own seed and the clock it started on. The moment itself is the one thing no server can see, and it is held between the run's elapsed time, past which nothing has happened yet, and the s
• at.turtleme.game.sweepReef procedure Sweep one patch of the reef, or the handful a chord opens, in the order given. What comes back is the patches that opened and what each one counts. While the board is still being played it also carries the covered patches the open numbers already prove safe, with what each of those counts, so a page can open one the moment it is tapped: a player could open every one of them at no risk and read the same counts. Where the shoal lies is not sent until the board is over. Sweeping a patch with a turt
• at.turtleme.player.state record A player's game progress, as adjudicated by turtle meat and published by the player. The record lives in the player's own repository and can be deleted by them at any time, which removes them from the public leaderboard. It is a complete snapshot rather than a change since last time, so withholding an unflattering one gains nothing: any later snapshot already accounts for it.
• at.turtleme.player.status record A declaration that an account plays turtle meat, and optionally that it is playing right now. Written by the player's own client and not verified by anyone: nothing here affects scoring, so there is nothing to gain by lying in it. Progress that does affect scoring lives in at.turtleme.player.state, which carries a signature.

• at.unthread.document.deleteDraft procedure Delete a draft document.
• at.unthread.document.getDraft query Get a single draft document by TID.
• at.unthread.document.listDrafts query List the authenticated user's drafts.
• at.unthread.document.putDraft procedure Create or update a draft document.

• at.upvote.comment record A Markdown comment on a canonical subject or a reply to another comment.
• at.upvote.getSignals query Get signal records indexed from the network, newest first. Optionally filter to signals from a single account.
• at.upvote.signal record An upvote on a URI — an at-uri for atmosphere documents, or an http(s) URL for the open web
• at.upvote.toggleSignal procedure Toggle an upvote signal on a standard.site document

• at.youandme.connection record A connection created by scanning someone's QR code

• at.zerowave.yomu.chapter record not from the namespace authority One manga reading session scrobbled from AniList by goyomu.
• at.zerowave.yomu.episode record not from the namespace authority One anime watching session scrobbled from AniList by goyomu.

• at.zrwv.parker.inbox space not from the namespace authority A single-owner private inbox of captured links, articles, photos, excerpts, and notes.
• at.zrwv.parker.item record not from the namespace authority A privately captured inbox item. Provisional (schemaVersion 1).
• at.zrwv.parker.probe record not from the namespace authority Protocol compatibility test record. Not user content.
• at.zrwv.parker.publication record not from the namespace authority Private publication intent and receipt for one public write. Provisional (schemaVersion 1).
• at.zrwv.parker.space space A single-owner private inbox of captured links, articles, photos, excerpts, and notes.
• at.zrwv.parker.taxonomy record not from the namespace authority A private tag, category, or collection. Provisional (schemaVersion 1).