Colitu clients ask Vostwave for identity, entitlement, eligible servers and a device-specific VPN profile. They do not recreate those rules locally.
One contract across platforms
The web, Android and iOS apps share lifecycle semantics while each platform keeps its native VPN engine. This keeps access decisions auditable and lets the service evolve without placing secrets or infrastructure logic in public clients.
Payments follow the same boundary
A browser can display a quote, but the backend creates the order, verifies Platega server to server and activates entitlement only after amount and currency match.