Auth

Authentication and authorization are environment-scoped and role-aware.

What we can’t know yet (UNKNOWN)

If an upstream dependency fails, responses must not imply success. They must surface uncertainty explicitly.