DNS, opt-in by default.

Chorus manages every A/CNAME/TXT/SRV record and domain an org owns — with per-record unix-style permissions, a public directory for records teams choose to expose, and webhook-driven automation. Private by default; publishing is a deliberate, guarded action.

• Full CRUD over A/CNAME/TXT/SRV records and domains, org-scoped, via API and dashboard.
• chmod-style permissions (9-bit mode, owner/group/other) on every record — private by default, with publishing a deliberate, guarded action.
• A public directory/search surface for records teams have chosen to publish; org-private data never leaks.
• A deterministic record linter flagging bad A-record IPs, malformed/apex CNAMEs, oversized TXT records, TTL bounds, and public records that expose internal IPs.

Built for teams managing DNS records and domains across an org, who need per-record ownership and controlled, opt-in publishing rather than an all-or-nothing DNS admin panel.