Peergos for Compliance

Technical control plane for Verae DataCubes on Peergos, NATS (untrusted broker), NPE (HPKE E2E), and ns1 70.88.205.138.

This is not a HIPAA/SOC 2/ISO certificate.

NATS is the untrusted broker. Production E2E is NPE/HPKE. Passthrough means destination in the clear; the body is ciphertext.

Live URLs (ns1):

• https://pfc.georgelambert.org/

• https://config.pfc.georgelambert.org/

• https://docs.pfc.georgelambert.org/walkthrough.html

• https://docs.pfc.georgelambert.org/nats-service-endpoints/

• https://sync.pfc.georgelambert.org/

• https://georgelambert.org/pfc/

• Remaining items
  • Done in the lab (ns1)
  • Still later
• Architecture
• Console, workspace, and catalog
  • Two identity planes
  • Workspace
  • Drag and drop
  • Hash registry and stamps
• PFC Inspect (Pattern A)
  • Host path
• NATS addresses
  • Hub (already on ns1)
  • PFC leaf clients
  • Subjects
• Host ns1 70.88.205.138
  • Existing
  • Public Caddy maps (Let’s Encrypt)
• Go services
• Configuration system
• Operations
• Walkthroughs
  • Console login (separate from Peergos Drive)
  • Cubes, catalog, copy+stamp
  • Users
  • Inspect (k-of-n)
  • Audit
  • Config SPA (unsigned preview only)
  • Secure message success vs failure
• Technical controls (not a certificate)
  • Access control
  • Cryptography
  • Audit and logging
  • Key custody
  • Integrity
• Key custody
  • Lab (ns1)
  • Production
• Variables
  • Signed wrapper payload (PFC_SIGNED_CONFIG)
  • Process environment