Current Zapier architecture, based on retained controlled evidence from November 7, 2026. This study is not a fresh cloud-state audit.
Intake and ownership
A bounded controlled inquiry enters the public API, which signs a fresh source identity. Zapier Catch Hook starts native HubSpot reads, interpretation, deterministic validation and visible Paths. The helper validates and records independent effects; Zapier owns orchestration and native action sequencing. n8n belongs to the historical draft-only implementation.
HubSpot remains authoritative for CRM identity, qualification, lifecycle, consent and opportunity storage. Existing audit tasks, scores and subsequent native nurture ownership remain intact. Text interpretation cannot grant qualification or marketing permission.
Visible conditional actions
- Qualified hot: create or reuse a scoped HubSpot opportunity, post a Slack alert and send the authored Gmail acknowledgment. Require confirmed fit, qualified sales state and lifecycle already at Opportunity. Do not invent deal value.
- Eligible cold: use only the native HubSpot nurture-candidate list action when existing eligibility, subscription, suppression and sales state permit it. List membership is not proof that a nurture email was sent.
- Excluded cold: no enrollment. Unknown permission cannot become consent.
- Unclear or contradictory: review without business effects.
Durable effects and independent receipt
PostgreSQL preserves immutable source identity and per-effect receipts. Completed effects are reused across restart and exact-source replay. Started or uncertain writes stop for provider readback rather than blind repetition. A withheld Slack Finish was reconciled from the actual provider message before replay reused its identity.
A separate inbox watcher supplies matching message identity, timestamp and content hash. The server compares the hash with authored content before displaying the visitor receipt toast. Send acceptance, independent receipt and human response are different states. Confirmation polls about every two minutes.
Bounded visitor access
The saved public-demo implementation fixes the recipient cohort, signs fresh sources and limits admission. Status access is capability-scoped; visitor results and previews expire after 24 hours. The email preview is sandboxed. This portfolio update exposes retained evidence, with no connected inquiry form.
Measurements and limits
Five original independent receipts took 70.165, 56.556, 54.841, 56.443 and 54.024 seconds. Four met the 60-second target. Two later public-demo receipts took 68.404 and 65.553 seconds; both missed. The original sample reused one simulated qualified contact and scoped deal. There is no delivery-time guarantee or measured business lift.
Six later sources covered two hot, two eligible cold, one opted-out cold and one review. The first cold receipt needed recovery; the fresh cold retest completed automatically. Earlier eligible native evidence confirmed an already-existing membership.
Dated operating state
November 7 operations records report six Zaps enabled for a bounded trial through November 21, 2026. Earlier paused acceptance records are historical. Current cloud toggles, trial availability and public HTTP access have not been verified here.
Original receipt timestamps · Six public-demo sources · Exclusion and review matrix · Native preservation · Actual workflow recording