Domains
Domains connect names, DNS Records and certificates to a Startup’s Sites, Apps, Interfaces and Mailboxes, signed with DNSSEC by default.
Every Startup answers at a claimed name from the moment it is created.
Contract
| Clause | Terms |
|---|---|
| Starts | At creation, Domain.claim gives the Startup a one-label name under an issuing Domain the public suffix list carries. |
| Acquires | Domain.register buys a name; Domain.connect attaches one the Startup holds, proved by a TXT record. |
| Uses | Domain.role is canonical, alias, redirect, preview, tenant, signIn or outreach. A redirect forwards to Domain.to, path and query kept. |
| States | Domain.state runs from candidate to released. verifying, live, degraded, expiring and lapsed are observed, never set. |
| Records | Each answer is a DNS Record set through DNSRecord.set. Records the platform writes refuse edits. |
| Certificates | Every serving Domain holds one, renewed through a CNAME that delegates validation (Domain.validation). A failed check moves the Domain to degraded through Domain.verify. |
| Spoofing | A Domain with no Mailbox publishes null SPF, DMARC p= and a null MX, written by Domain.register. |
| Customer names | Domain.connect with a tenant asks for a fresh ownership proof every time and refuses a wildcard name. |
| Payments | Domain.connect registers each serving Domain with Stripe as a payment method domain; Domain.walletsEnabled records it. |
| Ends | Domain.release stops serving and keeps the record. It refuses a Domain whose Domain.carriedIdentity is true. |
| Test | In test, Domain.register simulates the purchase and spends nothing. |
Verbs
| Verb | Object | Event |
|---|---|---|
| Domain.connect | Domain | Domain.connected |
| Domain.claim | Domain | Domain.claimed |
| Domain.verify | Domain | Domain.verified |
| Domain.release | Domain | Domain.released |
| DNSRecord.set | DNS Record | DNSRecord.set |
Interfaces
Example
fieldnotes.fm canonical Site,