System
What runs where. Public clients use HTTPS only; internal workers coordinate on NATS.
Flow
- Clients & Zapier call metered HTTPS on the product edge (
zap.verae.ai/ zappier-edge). - Edge authenticates, meters, and forwards to middleware / workers.
- NATS cluster carries jobs, archive queries, and tree proofs among services.
- WORM archives & tree nodes store digests and produce membership proofs.
- Chain / timestamp APIs (e.g.
api.veraetime.net) finalize public time evidence.
Zapier never speaks NATS. Only Verae HTTPS surfaces are public.
Principles
- Digests only — document bytes stay on the customer device.
- Fail closed — missing upstream or bad config does not invent receipts.
- Explicit product hosts on
verae.aiat70.88.205.138(ns1 Caddy + CoreDNS).