NATS Service Endpoints

Canonical catalog for Verae / PFC / secure-messaging on https://git.georgelambert.org/marchon/nats-service-endpoints

The NATS broker is untrusted. Production E2E is NPE (HPKE). Lab may use pfc-lab-xor. This is not a HIPAA/SOC 2/ISO certificate.

Related: system-git-sync, secure-messaging, peergos-for-compliance.

• Passthrough routing
• Endpoint records
  • Secure-messaging subjects
  • Timeouts and filters
• Errors and Network Error Bundle
• Signed configuration
• Message tracing

Passthrough

Destination mailbox id and the NATS subject may be in the clear so routers can work. The body is ciphertext. After send, the sender cannot open that ciphertext; they keep a lookup_id only. The same rule applies to the responder.