Do not implement AEAT XML inside your product
Your application works with JSON and integration contracts while the bridge keeps transport, technical rules, and presentation inside the fiscal core.
Integrate through REST API, server-side SDK, or webhooks. Your application keeps its domain while Kairoseth Fiscal centralizes preflight, idempotency, reconciliation, and VeriFactu presentation.
The boundary is designed so SaaS and vertical software can add VeriFactu without distributing certificates, XML, and reconciliation rules across customers.
Your application works with JSON and integration contracts while the bridge keeps transport, technical rules, and presentation inside the fiscal core.
Integrate directly over HTTP or wrap the contract with the SDK without moving certificates or tenant authority into the frontend or customer environment.
The webhook route uses HMAC signatures and anti-replay controls so source-system events are accepted without becoming implicit trust.
Validate payload, mapping, and configuration before issuing and return actionable errors to your own UI.
The same operation keeps a stable identity even when your backend retries after timeouts, network errors, or asynchronous jobs.
Custom connectors can be validated against one common contract so each integration does not invent different semantics.
You can wrap the workflow inside your own interface and preserve your product's user experience.
Invoice, customer, totals, and tax lines arrive as neutral JSON; you do not need to model AEAT SOAP/XML internally.
Sensitive configuration stays server-side and errors return through a stable structure that can be integrated into your UX.
Your backend uses Idempotency-Key and receives recordId/status without depending on a perfect remote response on the first attempt.
Your software can query state and consume the QR/text presentation contract without rebuilding fiscal rules locally.
The goal is for your application to know the Kairoseth Fiscal contract without reproducing certificates, endpoints, hashing, QR, reconciliation, or regulatory changes in every installation.
A clear technical boundary for integrating without duplicating the fiscal engine.
Yes. Kairoseth Fiscal API is designed so your product keeps its functional domain while delegating the supported fiscal contract, preflight, idempotency, status, and presentation to Puente VeriFactu.
No. REST is the primary contract. The server-side SDK is a convenience layer for calls and semantics without changing the canonical protocol.
Yes, when the source flow is event-driven. Webhooks are signed and tenant identity/mapping are resolved server-side.
Kairoseth Fiscal keeps the certificate and sensitive fiscal secrets inside the secure runtime, not in frontend code, plugins, or the source system.
Run preflight before issue and then treat recordId/status as the operational source. If the remote result is uncertain, the bridge reconciles instead of recommending a blind resend.
Yes. The project provides a Connector Contract Suite and reference connector. The broader Universal Adapter Contract remains a separate development stream, and any additional adapter must pass its own contracts and gates before it is presented as supported.
Yes. Kairoseth Fiscal v0.1.0 is published and we can diagnose whether Fiscal API or Fiscal Custom is the better fit, define the contract, and validate preflight. AEAT production remains controlled access and is not enabled by purchasing a plan.
Kairoseth separates identity, organization scope, product roles and product capabilities. A login route, browser state or AI response never becomes an authorization boundary by itself.
Customer resources and access are resolved inside an active organization context rather than treated as global account state.
Owner, Admin and Member authority is assigned per product. Organization membership alone does not automatically grant every product.
Sensitive access, policy and capability decisions remain authoritative on the server instead of trusting client UI state or model output.
Capabilities that can act are introduced behind explicit grants, staged gates and audit rather than implied autonomy.
Review the customer-facing policies that define privacy, security reporting, acceptable use and the current legal operating framework.
We review payloads, events, retries, numbering, and UX so VeriFactu fits into your product without pushing fiscal complexity onto the end customer.