Why FastAPI Fits VeriFact
FastAPI provides typed request models, validation, asynchronous request handling, automatic OpenAPI documentation, and predictable JSON responses. VeriFact 3.5.0 builds on that foundation with scoped authentication, tenant isolation, evidence provenance, idempotency, durable jobs, audit records, privacy controls, and lifecycle headers.
Secure Verification Flow
- A WordPress plugin or standalone application sends editor-approved content through its trusted server-side component.
- The server authenticates with a scoped developer key, a site-bound token, or a configured OAuth/OIDC identity.
- VeriFact extracts claims, retrieves evidence from enabled providers, applies policy and provenance rules, and returns structured findings with inline citations.
- The client validates the response, lets a human review unresolved claims, and publishes only approved evidence fields.
Hosted or Licensed Private Deployment
Teams can connect to the managed VeriFact endpoint or operate an approved private deployment profile. Private deployments still require verified DNS/TLS, Vault-backed secrets, storage, provider configuration, monitoring, backups, and recovery testing. A deployment manifest alone does not create those services.
