At this level
tech.lenooby09.kvcs · 4- tech.lenooby09.kvcs.channel record A kvcs channel head — points at one or more patch records under tech.lenooby09.kvcs.patch.
- tech.lenooby09.kvcs.patch record A signed kvcs patch envelope, addressable on the author's atproto PDS. The rkey is the patch id in hex.
- tech.lenooby09.kvcs.signingKey record An atproto identity (did:plc / did:web) endorses a local kvcs patch-signing key (did:key / did:jwk) by hosting this record on its PDS. Existence of the record over an OAuth-authenticated write proves the atproto DID consented to the binding; the inner JWS proves the local key consented in turn.
- tech.lenooby09.kvcs.tag record A signed kvcs tag, addressable on the tagger's atproto PDS. The rkey is the canonical-JSON digest of the tag payload (lower-case hex BLAKE3 multihash).