last.vet-api¶

LastVet backend API: veteran auth, VA Lighthouse integration, consent engine, coordination loop ledger, provider secure links, and AWS-hosted production stack.

Cross-product context: Phase 1 scope, gates, and invariants live in lastvet-gates. Strategy and product law: lastvet-gates/docs/lastvet/LASTVET_BIBLE.md (v1.0 + amendment v1.1). Platform architecture (R940 migration): lastvet-gates/docs/architecture/.

CARIN attestation: Signed Code of Conduct and April 15, 2026 Leavitt Partners confirmation are vendored in lastvet-gates/docs/compliance/. Public Terms §13.1: last.vet-web. Timeline record: docs/compliance/VA_PRODUCTION_ACCESS_TRACKER.md.

Deployment status (August 2026)¶

Production: AWS ECS + RDS (us-west-2), DNS-only api.last.vet → ALB.
Rollback net: Railway prod API + Postgres remain online, frozen, no traffic (tear down before VA production data access).
Staging / dev: See docs/deployment/DEV_STAGING.md and docs/deployment/ENVIRONMENT_TOPOLOGY.md.

Canonical AWS inventory (vendored cross-product): lastvet-gates/docs/lastvet/AWS_ENVIRONMENT.md. Ops console guide: lastvet-gates/docs/lastvet/AWS_OPS_CONSOLE.md (local copy under docs/deployment/ for historical links).

Documentation¶

Start at docs/README.md. Subdirectories:

Directory	Contents
`docs/api/`	API integrations, RLS plans, VA demo artifacts, consent categories
`docs/compliance/`	VA production access tracker, counsel packets, compliance correspondence
`docs/deployment/`	AWS migration, environment topology, dev/staging, ops console (local copy)
`docs/planning/`	Gate thresholds, session handoffs, Gate 0.5 decisions
`docs/security/`	Security posture series, pentest status, secrets audit
`docs/runbooks/`	Production cutover, E2E run logs, Gate 0.5 exit checklist
`docs/misc/`	Chat exports, PDF generation scripts, ambiguous / archival material

Quick start¶

pnpm install
cp .env.example .env   # fill from Bitwarden / team vault
pnpm dev

Infra: infra/README.md.