History

George Lambert ddf772454b Some checks are pending offline / test (push) Waiting to run Details Clean prepaid SoT, identity mailbox, public access planes, leaf policy, fleet spawn Persist account-balance books; edge caches prepaid from books. Add zappier-identity, verae-nats-accounts, verae-jobs-events, verae-access-staff, zapier-decisions. Edge binds loopback; lan-134 stays off; HTTP services prefer local spawn.		2026-09-11 17:15:16 -04:00
..
src	Clean prepaid SoT, identity mailbox, public access planes, leaf policy, fleet spawn	2026-09-11 17:15:16 -04:00
test	Separate Zapier, web, API, and leaf access planes with NATS authz	2026-09-11 16:05:05 -04:00
NATS.md	Separate Zapier, web, API, and leaf access planes with NATS authz	2026-09-11 16:05:05 -04:00
package-lock.json	Separate Zapier, web, API, and leaf access planes with NATS authz	2026-09-11 16:05:05 -04:00
package.json	Separate Zapier, web, API, and leaf access planes with NATS authz	2026-09-11 16:05:05 -04:00
README.md	Separate Zapier, web, API, and leaf access planes with NATS authz	2026-09-11 16:05:05 -04:00

README.md

verae-access-leaf

Server-to-server leaf node access plane. Remote machines connect as NATS leaf nodes (or POST /forward with a leaf token). They never get the core billing subjects.

Forgejo: https://git.georgelambert.org/marchon/verae-access-leaf

remote leaf  →  verae.access.leaf.in  →  authz.check  →  verae.archive.put | jobs.*

Denied: verae.billing.balance.adjust, verae.billing.statement.get. A compromised WORM/leaf cannot credit customers.

LEAF_TOKEN required. Port :3023. Do not publish NATS 4222 to the internet; leaf nodes use a private leafnode port / tunnel.