Product

Everything Word isn’t.

A structured document editor with a legally-aware lifecycle. Author in Markdown, notate in LaTeX, execute through the Baldwinson Protocol.

See the syntax Read the spec

01 — Syntax

Hybrid authoring syntax.

Markdown for humans. LaTeX for notation. Atto for structure. The three layers parse into a single canonical Abstract Syntax Tree (AST) and serialize back losslessly.

Every file is plain text. Git-compatible. Human-readable. Diffable. What you write is what ships.

term-sheet.atto

Term Sheet · Draft

Series A Term Sheet

Valuation

Pre-money valuation shall be $12,000,000.

The post-money cap table reflects Ppost = Ppre + I.

02 — Directives

Typed semantic blocks.

Parties, signatures, attachments, callouts, review anchors. Each is a first-class node in the AST — not cosmetic markup. The parser validates them; the protocol acts on them.

Directives can be nested, referenced, and queried. A signature block knows which party it belongs to. An attachment knows whether it has been verified.

::parties
parties.atto
::signature-block
signature.atto
::callout
callout.atto

03 — Notation

LaTeX, natively.

Inline and display math render in place — no insert-object dance, no screenshot of a formula. The editor preserves the source; the renderer shows the notation.

For financial schedules, legal definitions, or scientific content, notation is content. Atto treats it that way.

Inline
inline-math.atto

The late fee is L = B × 0.015 per day.

Display
display-math.atto

Compound interest over n periods:

A = P(1 + r⁄n)nt

04 — Lifecycle

Signing and freeze.

When every required signer has countersigned, the document transitions to frozen. From that point, the content is immutable and the Baldwinson Protocol layer fires execution events.

Every state transition is an MQTT event. Every event is recorded in the patch log. There is no “which version was signed” question.

lifecycle/signing
# topic: atto/doc/{id}/lifecycle
event: sign.intent
party:  baldwinson-corp
signer: curtis@baldwinson.co
order:  1
at:     2026-04-23T18:04:12Z
---
event: sign.accept
sig:   ed25519:AQ...dF
hash:  sha256:4c1f...a7
---
event: doc.freeze
root:  sha256:8b22...e9
final: true

05 — Provenance

Fonts as part of the signature.

An executed document must render identically in a year, or five, or twenty. Atto treats the font binary as part of the execution identity — not a presentational afterthought served by whoever happens to be hosting.

The Atto Font Registry Protocol (AFRP) gives every reference a portable identifier, a machine-readable registry manifest, and a SHA-256 subresource-integrity hash per binary. At signing, every reference is pinned. Any drift — a re-released version, a mutated binary, a missing asset — fails resolution.

Identifier grammar
font-refs.atto

Two tiers, three forms

Canonical shorthand, bare and portable: @/Lineal@^2

Registered scope, identity-verified registry: @velvetyne/Bagnard@2.1.0

Permissionless URI, any compliant host: fonts.example.com/Grotesk@~1.4

Registry manifest
afrp-manifest
.well-known/atto-font-registry.json
"registry": {
  "protocol_version": "1.0",
  "shorthand":        "velvetyne"
},
"fonts": [{
  "id": "Bagnard",
  "versions": [{
    "version": "2.1.0",
    "styles": [{
      "weight": 400,
      "formats": [{
        "type":      "woff2",
        "url":       "…/Bagnard-Regular.woff2",
        "integrity": "sha256-abc…3456A="
      }]
    }]
  }]
}]

06 — Preconditions

Execution can gate on external data.

Signatures are not the only thing a document might wait on. A residential lease might need a credit check. A loan application might need income verification. A vendor agreement might need insurance verification.

:::credit-check is the first of Atto’s ::: protocol blocks — authoring surfaces that compile to precondition directives and render the tenant-facing consent form from the same source. Required disclosure fields (purpose, requesting party, privacy scope, pull type) make the document self-documenting. What you write is what the subject reads. What the subject reads is what the bureau is told.

:::credit-check
credit-check.atto

Git-compatible. Human-readable. Protocol-native.

See pricing