At this level
space.ziran ยท 10- space.ziran.checkpoint record not from the namespace authority An atile-style published snapshot of a document, written by any member into their own repo (rkey = the doc's rkey; putRecord replaces the author's previous checkpoint). Carries the tile manifest with every resource's src replaced by an atproto blob ref, so an invitee can instantiate the document without replaying history, then apply ops past the frontier. Checkpoints are rare: go-live, a size threshold, or an explicit publish.
- space.ziran.doc record A live document in a space, written by the document's creator: the partial manifest linking a Ziran tile to its online identity. Document discovery in a space is the union of these records across member repos. The record's author is the sole authority for the document's role assignments; roles are enforced by tiles, not by the protocol.
- space.ziran.home space This account's own document space: every Ziran document that isn't shared lives here, following the identity across devices and browsers. Always at skey `self`, always member-list policy with exactly one member. Sharing a document means adding it to a shared space instead.
- space.ziran.inbox space A public-policy space through which anyone can deliver a Ziran space invitation to this account. Invites are written into the sender's own repo; the recipient polls the space to discover them.
- space.ziran.info record Space metadata, written by the space authority (rkey self). Holds what simplespace itself has no field for.
- space.ziran.invite record An invitation to a Ziran space, written by the inviter into their own repo inside the invitee's public-policy inbox space. The inviter must already have added the invitee as a member of the space; this record only makes that membership discoverable. Dismissal is app-local: the record belongs to the inviter.
- space.ziran.op record not from the namespace authority One tp-sync frame for a document, written by any member into their own repo. Ops are never deleted: a document is always rebuildable from an initial checkpoint plus the full op history. Per-author order is the repo's rev order; cross-author order is causal via parents, with deterministic (rev, author) tiebreak between concurrent siblings.
- space.ziran.permissions permission-set
- space.ziran.presence record not from the namespace authority Liveness beacon, written by any member into their own repo while they have the document open (rkey = the doc's rkey; refreshed by putRecord roughly every minute). Peers treat the author as present while the timestamp is recent.
- space.ziran.space space A shared space of live Ziran documents. Membership is space-wide: every member sees every document in the space, and each member's contributions are written to their own repo.