# verae-access-web

**Direct web** access plane. Customer browsers hit this process, not Zapier and not the NATS port.

**Forgejo:** https://git.georgelambert.org/marchon/verae-access-web

Every NATS hop is `verae.access.web.*` → `verae.access.authz.check` → internal `verae.billing.statement.get` (reload only, not CS credits).

| Route | Job |
|-------|-----|
| `GET /health` | `{ plane: "web" }` |
| `GET /statement/:id` | Authz then statement |
| `POST /reload` | Authz then `balance.adjust` kind=reload |

Port `:3021`.