- Alternative tracks align fragment boundaries on a common timeline
- A fragment starts at an independently decodable random access point
- A segment is an addressable wrapper containing one or more fragments
- A chunk carries a sequential subset of one fragment's samples
- Completed chunks can be published before the parent segment is complete
- Later chunks may depend on samples from the same fragment
- pssh and tenc establish DRM initialization and track defaults
- seig and senc-family boxes describe effective per-sample protection
- mdat remains encrypted media; the License and raw key stay out of band