Architecture

Layers: DataCube (evidence) → Peergos cryptree (container) → NATS/NPE (messages) → Python/Go leaf services on ns1 → Caddy hostnames.

A workspace DataCube is the user’s primary container. Other cubes are indexed with library cards. Each object identity is SHA-256 plus the original created_ts. Copies preserve that identity; the dest chain records copy.

Peergos HTML5 apps never open NATS (Pattern A outbox only).

Go services each run an in-process NATS server that leaf-connects to nats-a 10.10.10.21:7422 (cluster verae with nats-b/c). The live console is the Python admin on :18780.