Thx Boris, noted! 
So with service endpoints in the DID Doc the discovery side is basically solved, since the AppView just resolves member DIDs it already knows about. Check 
The delivery side seems further along than I thought, I found Dave Nash’s RFC proposing metadata notifications through the firehose (so not the actual content), then the AppView fetches directly from the PDS with OAuth. That would work for private forum sections 