Architecture
============

Layers: DataCube (evidence) → Peergos cryptree (container) → NATS/NPE (messages) →
Go leaf services on ns1 → Caddy hostnames.

Peergos HTML5 apps **never** open NATS (Pattern A outbox only).

Go services each run an **in-process NATS server** that **leaf-connects** to
``nats-a`` ``10.10.10.21:7422`` (cluster ``verae`` with nats-b/c).