Follow it top to bottom: many independent doors, one content-addressed app, a mesh of peers, and the chain. Only the bottom two must always run — everything above is replaceable.
A _dnslink TXT record points at the CID. Spread across registrars — seize one, others remain.
An on-chain contenthash → the CID. No registrar, no ICANN.
Resolves outside the DNS root entirely — a different naming system.
Any gateway, or your own node. Zero naming required at all.
Self-verifying. Loads from any door, any gateway, or your local cache. After first load the PWA runs on-device — there is no host to seize.
Holds every balance and all social data (posts, profiles, groups, follows). BABE produces a block ~every 6s; GRANDPA finalizes it. Validators bond VBAN to secure it. This — plus the peer mesh above — is the only part that must always run.