A community owns one .eth name; each member receives a subdomain under it.
Members edit their own records and can transfer the name without going through anyone —
but the contract owner keeps the ability to overwrite and reclaim it,
which step 3 spells out.
Testnet only
Three steps, nothing else.
community.eth.
alice.community.eth.
You hold every key. You trust nobody.
You keep ownership; resolution is revocable at any time.
setResolver on ENS is all it takes. But be clear:
for names already issued, the operator can still overwrite and reclaim them —
that follows from the architecture and is not something anyone can promise away.