Endpoint records
================

Full JSON: ``catalog/endpoints.json``. PFC import:
``catalog/pfc-derived.json`` from
https://git.georgelambert.org/marchon/peergos-for-compliance/src/branch/main/schemas/subjects.json

Secure-messaging subjects
-------------------------

* ``verae.sm.send`` -- passthrough deliver; from console/leaf; reject unsigned
  config and empty ciphertext (unless ``plain-lab``).
* ``verae.sm.dead`` -- dead letter; Network Error Bundle in body.
* ``verae.sm.error`` -- emit bundle: ``ct_sender`` + ``ct_system``.
* ``verae.sm.log.summary`` -- central summaries (codes, lookup_id, dest_class).
* ``verae.admin.config.sign`` -- Ed25519 wrap; unsigned files rejected.
* ``verae.admin.history.append`` -- prev, new, unified diff on DataCube chain.

Timeouts and filters
--------------------

Each derived row in ``catalog/pfc-derived.json`` has ``timeout_sec`` and
``filter``. Request-reply defaults to 5s, replica ingest 4s, pin 30s.
SM send rejects missing ``to``, empty ciphertext (unless ``plain-lab``),
plaintext ``body``, and summary records that contain ``ct``.