| … | … | @@ -3,7 +3,7 @@ |
| 3 | 3 | The **Holepunch-native home for an AT Protocol repository**: records live in a classic |
| 4 | 4 | **Hyperbee** (`collection/rkey → DAG-CBOR value`), and a **Hypercore firehose** carries the |
| 5 | 5 | signed `#commit` / `#sync` events. This is where the data actually lives in P2P; |
| 6 | | [`atproto-repo`](../atproto-repo) is the byte-exact serializer layered over it. |
| 6 | [`atproto-repo`](https://7rnx.net/git/repos/atproto-repo) is the byte-exact serializer layered over it. |
| 7 | 7 | |
| 8 | 8 | Part of the **atproto-base** self-custody stack: |
| 9 | 9 | |
| … | … | @@ -51,10 +51,10 @@ for await (const { bytes } of seq.subscribe(0)) { /* signed #commit frames */ } |
| 51 | 51 | ## Design notes |
| 52 | 52 | |
| 53 | 53 | - **Storage vs. serialization.** RepoStore holds the *logical* record set; the signed |
| 54 | | MST/commit bytes are produced by [`atproto-repo`](../atproto-repo) at read/sign time. |
| 54 | MST/commit bytes are produced by [`atproto-repo`](https://7rnx.net/git/repos/atproto-repo) at read/sign time. |
| 55 | 55 | - **Keyless read path.** `read-view` rebuilds a signed CAR from replicated records + the |
| 56 | 56 | firehose's signed commit — the signature travels in the firehose, never re-minted. This |
| 57 | | is what lets [`atproto-bridge`](../atproto-bridge) front a peer without its key. |
| 57 | is what lets [`atproto-bridge`](https://7rnx.net/git/repos/atproto-bridge) front a peer without its key. |
| 58 | 58 | - Bare-native (bare-fs/os/path); the whole stack runs under Bare. |
| 59 | 59 | |
| 60 | 60 | ## Test |