At this level
at.blueharbor · 4- at.blueharbor.channel record A channel within a harbor. Written by the harbor owner; points at the harbor record. Text channels also host an ad-hoc call; voice channels are call-first.
- at.blueharbor.createSession procedure The lxm named in service-auth JWTs minted for the BlueHarbor backend (aud did:web:blueharbor.at). The backend verifies the JWT against the caller's DID document and exchanges it for a BlueHarbor session token. Defined here so the method identifier resolves; the HTTP call itself is served by the BlueHarbor service, not a PDS.
- at.blueharbor.harbor record A community (harbor). Lives in its founder's repo; its AT-URI is the community's permanent, portable id. The record is a public claim — message access is granted by the harbor's app service.
- at.blueharbor.membership record A user's public claim of membership in a harbor. Only the account holder can write their repo, so the record proves intent and makes the membership graph portable. Access to messages is granted by the harbor's app service, which verifies this record exists; deleting it is leaving. A kick does not touch this record — the service is the access authority.