Nick's Blog

A space credential is a key to the whole space, so every access configuration question reduces to two: who gets handed a key, and what software they can use.

Notifications are the most personal cross-app data in the atmosphere, and today they live nowhere you control.

Public feed generators drink from a firehose that permissioned data never enters.

A poll is a space, a ballot is an address, and a vote record carries almost nothing because the address carries everything.

A forum with public categories, private categories, and one set of record shapes across both.

A community can own spaces the way a person does.

A private events space is the first shape with other people in it: a member list of friends and family, guest RSVPs that live on the guests' own PDSes, and an app allowlist that controls which services ever see the venue address.

A self-only space is the smallest shape permissioned data can take, with one authority, one member, and one repo all under the same DID.

AT Protocol is public by default.

Last year, Devin and I built atprotofans.com to test out payments on ATProtocol.

The Bluesky team published Proposal 0008: User Intents for Data Reuse earlier last year, along with a discussion thread.

AtmosphereConf was an incredible experience.

When I floated the idea of Graze sponsoring my attendance at the IETF Montreal conference last November, Devin was an immediate yes.

AtmosphereConf was an incredible experience.

AtmosphereConf was an incredible experience.

One challenge with ATProtocol’s permissioned data model is handling records that need to be both public and private.

In ATProtocol, users have full control over writing records.

In Part 1, we explained what CIDs are: self-describing, content-addressed identifiers.

A Content Identifier, or CID, is a self-describing, deterministic, content-addressed identifier.

Editing the “Permissioned data is a love triangle” post left a lot on the floor.

Last summer, I wrote a blog post called “ATProtocol Record Hydration: Building Privacy-Aware Views”.

Lexicon Garden is a platform for exploring and developing lexicon schemas, fundamental building blocks that define ATProtocol data and services.

You may be using agents to write code, make API calls, and build applications, but a lot of protocol documentation is written for people who browse websites and gather information from code repositories.

Lexicon Garden lets you fully validate schemas and records.

Lexicon Garden lets you create and manage lexicon schemas right on the website.

Lexicon Garden now supports ATProtocol OAuth, so you can sign in and make authenticated XRPC calls right from the documentation.

If you build on ATProtocol, you know how hard it can be to find lexicon schemas, make sense of their documentation, and locate useful example records.

View post on Bluesky View post on Bluesky View post on Bluesky Ben Folds (Oct 5) View post on Bluesky View post on Bluesky View post on Bluesky View post on Bluesky Sammy Rae (Apr 16) Palace (Mar 18) View post on Bluesky

In my last post, I talked about the community manager pattern.

@brittanyellich.com recently shared a post about her work on “opensocial.community” and the challenges of representing groups in ATProtocol.

Authentication is an area that generally has really difficult UX constraints and the language really matters.

Update: Not all posts are winners.

The phrase "don't feed the trolls" originated on Usenet in the early-to-mid 1990s, documented in the 1996 edition of Eric S.

If you've been following along with my previous posts about decentralized identity and cryptographic proofs in ATProtocol, you know I've been exploring how we can build verifiable trust into decentralized systems.

This is Part 2 of our technical deep-dive into building cryptographically-verified endorsements on ATProtocol.

Picture this: You're scrolling through LinkedIn, and you see that your colleague has "endorsed" you for Python.

I'm excited to launch at://work, a modern job board built on ATProtocol that fundamentally changes how job listings and professional networking work on the decentralized web. at://work - ATProto Job Board Your Data, Your PDS When you sign in to at://work…

Starting September 29th, Ohio joins 24 other states requiring age verification for adult websites.

Today I'm excited to share QuickDID, a high-performance handle resolution service for the ATmosphere that's now available as public infrastructure at https://quickdid.smokesignal.tools/.

Something clicked for me while reading Chris Boscolo's recent introduction to AT-SMS.

Another if-this-then-at blueprint I've been exploring: IF an identity has a cryptographically-signed payment proof THEN unlock access to confidential data services The Blueprint Pattern This blueprint combines two powerful ATProtocol patterns: Signed atte…