At this level
social.smallbury · 1- social.smallbury.actor.keyring record not from the namespace authority Encrypted snapshot of the actor's local pairwise trust secrets for multi-device sync. Ciphertext is encrypted to encryptionPublicKey on social.smallbury.actor.profile; only the identity private key on a authorized device can decrypt it.
- social.smallbury.actor.listTrustRevisions query not from the namespace authority Returns trust-record revision hints for a set of DIDs (mutual contacts, pending connections, self). Used on app foreground and on a timer so the client learns about de-trust or reciprocation without polling every PDS blindly.
- social.smallbury.actor.profile record not from the namespace authority Supplemental Smallbury profile data stored alongside app.bsky.actor.profile. Presentation fields (display name, avatar, description, etc.) live on the Bluesky profile record only.
- social.smallbury.actor.trust record not from the namespace authority Contacts this actor trusts, content-key epochs for E2EE, and optional in-flight pairwise-secret delivery during trust establishment. Trusted DIDs are cleartext for AppView indexing. Mutual trust is derived: A trusts B and B trusts A (each side's trusted array). Feed visibility requires mutual trust on both records. Per-epoch content keys use opaque slots (see #contentKeyWrap).
- social.smallbury.feed.list query not from the namespace authority Authenticated home feed: root shouts from followed authors, root Smallbury posts from mutually trusted authors, plus all indexed comments on those roots. Includes trust-record revision hints so the client can refresh cached trust records from PDS when needed.
- social.smallbury.feed.post record not from the namespace authority Record containing a Smallbury post. Aligned with app.bsky.feed.post for public/shout content. Private posts reference a keyEpochId on the author's trust record and store encrypted body in ciphertext.
- social.smallbury.feed.reaction record not from the namespace authority Emoji reaction by an actor on a post or comment. Use one record per emoji (stacking supported). Public targets store cleartext emoji. Reactions to encrypted targets store ciphertext plus keyEpochId.
- social.smallbury.graph.invite record not from the namespace authority Trust invitation from this actor to a contact. The invite URL carries a signed token bound to inviteId; acceptance must match intendedRecipientEncryptionPublicKey when set. Revocable by the inviter.
- social.smallbury.graph.listInboundTrust query not from the namespace authority DIDs of actors who list the authenticated viewer in their social.smallbury.actor.trust trusted array (indexed from the firehose). Used to populate the People list with pending inbound trust.
- social.smallbury.notification.list query not from the namespace authority Notifications for the authenticated viewer (newest first). Includes read items; AppView may drop items older than 30 days.
- social.smallbury.notification.markRead procedure not from the namespace authority Mark one or more notifications as read for the authenticated viewer.