1. Junos OS REST API Guide: In the "Overview of the Junos OS REST API" section, the documentation states, "The Junos OS REST API allows a client application to make HTTP(S) requests to a Junos OS device running the REST API." This explicitly defines the client as a separate application, confirming it is off-box. (Source: Juniper Networks TechLibrary, Junos OS REST API Guide).
2. Understanding Zero Touch Provisioning: The ZTP process is an automated script-driven feature that begins when a device is powered on with a factory-default configuration. The documentation explains, "When a device that supports ZTP is powered on... it attempts to bootstrap and configure itself automatically." This entire boot and bootstrap process is observable and can be interacted with via the console port, thus enabling automated provisioning through it. (Source: Juniper Networks TechLibrary, Software Installation and Upgrade Guide, "Understanding Zero Touch Provisioning" section).