{
  "version": "0.2.1",
  "endpoints": [
    {
      "name": "verae.ts.request",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "verae-timestamp"
      ],
      "in": {
        "fields": [
          "hash",
          "cube_id",
          "scope"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.ts.receipt",
      "pattern": "pub",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "verae-timestamp"
      ],
      "in": {
        "fields": [
          "receipt",
          "merkle"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 0.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.ts.verify",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "verae-timestamp"
      ],
      "in": {
        "fields": [
          "receipt_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.ts.held.query",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "verae-timestamp"
      ],
      "in": {
        "fields": [
          "org_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.ts.batch",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "verae-timestamp"
      ],
      "in": {
        "fields": [
          "items"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.hash.report",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "hashlog"
      ],
      "in": {
        "fields": [
          "hash"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.storage.pin",
      "pattern": "queue",
      "for": "Pin object bytes via IPFS pin API / Kubo localhost",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-ipfs"
      ],
      "in": {
        "fields": [
          "cid",
          "tier",
          "cube_id",
          "sha256",
          "bytes_hex"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 30.0,
      "filter": "Kubo localhost only; no WAN 5001; hash must match bytes",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.storage.hydrate",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-ipfs"
      ],
      "in": {
        "fields": [
          "cid",
          "sha256"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "Kubo localhost only; no WAN 5001; hash must match bytes",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.storage.replicate",
      "pattern": "queue",
      "for": "Replicate bytes to min_ok replica ingest subjects",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-repl"
      ],
      "in": {
        "fields": [
          "sha256",
          "bytes_hex",
          "cube_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 4.0,
      "filter": "Kubo localhost only; no WAN 5001; hash must match bytes",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.pfc.replica.a.ingest",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-replica-a"
      ],
      "in": {
        "fields": [
          "sha256",
          "bytes_hex"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.pfc.replica.b.ingest",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-replica-b"
      ],
      "in": {
        "fields": [
          "sha256",
          "bytes_hex"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.cube.append",
      "pattern": "queue",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "block",
          "cube_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 4.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.cube.export",
      "pattern": "queue",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "connector"
      ],
      "in": {
        "fields": [
          "cube_id",
          "format",
          "share_mode"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 4.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.sig.verify",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "signatures"
      ],
      "in": {
        "fields": [
          "object_sha256",
          "signature_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.host.apps.start",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "supervisor"
      ],
      "in": {
        "fields": [
          "app_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.host.apps.stop",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "supervisor"
      ],
      "in": {
        "fields": [
          "app_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.host.apps.status",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "supervisor"
      ],
      "in": {
        "fields": [
          "app_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.sample.job",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "desktop-host"
      ],
      "in": {
        "fields": [
          "kind"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.app.manage",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "desktop-host"
      ],
      "in": {
        "fields": [
          "op"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.compliance.session",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "op",
          "cube_id",
          "officers",
          "session_id",
          "sha256"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.inspect.open",
      "pattern": "request-reply",
      "for": "Start k-of-n inspect; log-before-reveal",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "cube_id",
          "officers",
          "purpose",
          "scope",
          "max_hours"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "k-of-n officers; author cannot be officer; TOTP session; log-before-reveal",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.inspect.access",
      "pattern": "queue",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "cube_id",
          "session_id",
          "sha256",
          "action"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 4.0,
      "filter": "k-of-n officers; author cannot be officer; TOTP session; log-before-reveal",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.inspect.close",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "cube_id",
          "session_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "k-of-n officers; author cannot be officer; TOTP session; log-before-reveal",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.inspect.revoke",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "cube_id",
          "session_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "k-of-n officers; author cannot be officer; TOTP session; log-before-reveal",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.policy.attest",
      "pattern": "queue",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "cube_id",
          "org_pack"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 4.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.pfc.health",
      "pattern": "request-reply",
      "for": "Loopback health for PFC services",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "all-pfc"
      ],
      "in": {
        "fields": [
          "service"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.pfc.cube.create",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "cube_id",
          "profile"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.pfc.object.put",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "cube_id",
          "text",
          "hex"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.pfc.workspace.ensure",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "username"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.pfc.catalog.search",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "q",
          "workspace_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.pfc.cube.copy",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "src",
          "dest",
          "sha256",
          "stamp_scope",
          "include_files"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.pfc.stamp.request",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "hash",
          "created_ts",
          "cube_id",
          "stamp_scope"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.sm.send",
      "pattern": "core",
      "for": "Deliver a passthrough secure message (dest in the clear, body ciphertext)",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "sm-leaf"
      ],
      "in": {
        "fields": [
          "to",
          "from_lookup_id",
          "alg",
          "ct"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "verae.sm.dead",
      "timeout_sec": 5.0,
      "filter": "passthrough dest/subject clear; reject missing to, empty ct, plaintext body, body-like log fields",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.sm.dead",
      "pattern": "core",
      "for": "Dead-letter failed service requests",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "sm-leaf"
      ],
      "in": {
        "fields": [
          "error_code",
          "lookup_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "verae.sm.dead",
      "timeout_sec": 5.0,
      "filter": "passthrough dest/subject clear; reject missing to, empty ct, plaintext body, body-like log fields",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.sm.error",
      "pattern": "core",
      "for": "Emit a Network Error Bundle (ct_sender + ct_system)",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "sm-leaf"
      ],
      "in": {
        "fields": [
          "ct_sender",
          "ct_system"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "verae.sm.dead",
      "timeout_sec": 5.0,
      "filter": "passthrough dest/subject clear; reject missing to, empty ct, plaintext body, body-like log fields",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.sm.log.summary",
      "pattern": "core",
      "for": "Central log summaries (codes only, never ciphertext)",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "central-log"
      ],
      "in": {
        "fields": [
          "code",
          "lookup_id",
          "dest_class"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "verae.sm.dead",
      "timeout_sec": 5.0,
      "filter": "passthrough dest/subject clear; reject missing to, empty ct, plaintext body, body-like log fields",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.admin.config.sign",
      "pattern": "core",
      "for": "Sign a configuration payload (Ed25519 wrapper)",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "payload",
          "prev_signed"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unsigned wrappers rejected; empty actor rejected",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.admin.history.append",
      "pattern": "core",
      "for": "Append prev + new + unified diff to admin-history cube",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pfc-admin"
      ],
      "in": {
        "fields": [
          "prev",
          "new",
          "diff",
          "actor"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unsigned wrappers rejected; empty actor rejected",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.npe.dir.lookup",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pubkey-directory"
      ],
      "in": {
        "fields": [
          "handle"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.npe.dir.list",
      "pattern": "request-reply",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "pubkey-directory"
      ],
      "in": {
        "fields": []
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 5.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.gossip.handshake",
      "pattern": "pub",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "gossip"
      ],
      "in": {
        "fields": [
          "from",
          "to"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 0.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.gossip.envelope",
      "pattern": "pub",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "gossip"
      ],
      "in": {
        "fields": [
          "from"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 0.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.gossip.heartbeat",
      "pattern": "pub",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "gossip"
      ],
      "in": {
        "fields": [
          "node_id",
          "ts_ms"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 0.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.gossip.receipt",
      "pattern": "pub",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "gossip"
      ],
      "in": {
        "fields": [
          "message_id",
          "node_id",
          "ok"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 0.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.gossip.peer.join",
      "pattern": "pub",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "gossip"
      ],
      "in": {
        "fields": [
          "addr",
          "node_id"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 0.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    },
    {
      "name": "verae.gossip.peer.leave",
      "pattern": "pub",
      "for": "PFC/Verae subject \u2014 see peergos-for-compliance/docs/nats-addresses.md",
      "from": [
        "pfc-py-admin",
        "sm-leaf",
        "connectors",
        "pfc-repl",
        "pfc-ipfs"
      ],
      "to": [
        "gossip"
      ],
      "in": {
        "fields": [
          "addr"
        ]
      },
      "out": "ack or service JSON (never recipient mail plaintext on error subjects)",
      "encryption": "passthrough dest-in-clear; body pfc-lab-xor or NPE; Pattern A apps never publish",
      "reject": [
        "unknown subject",
        "missing required fields",
        "plaintext PHI",
        "verae.llm.turn.>"
      ],
      "dead": "none",
      "timeout_sec": 0.0,
      "filter": "unknown subject rejected; required payload fields; no verae.llm.turn.>; no plaintext PHI",
      "git": "https://git.georgelambert.org/marchon/peergos-for-compliance"
    }
  ]
}