Architecture

Layers: DataCube (evidence) → Peergos cryptree (container) → NATS/NPE (messages) → Go leaf services on ns1 → Caddy hostnames.

Peergos HTML5 apps never open NATS (Pattern A outbox only).

Go services each run an in-process NATS server that leaf-connects to nats-a 10.10.10.21:7422 (cluster verae with nats-b/c).