Decisions
| ID | Status | Date | Title | Supersedes |
|---|---|---|---|---|
| 0001 | Accepted | 2026-01 | Single JWKS issuer as trust root | - |
| 0002 | Accepted | 2026-02 | RBAC via Casbin + PolicyDefinition edge table | - |
| 0003 | Accepted | 2026-02 | Stateless JWT - no revocation list, short TTL + refresh | - |
| 0004 | Accepted | 2026-02 | OTP state in Redis (TTL-based), not in PostgreSQL | - |
| 0005 | Accepted | 2026-06 | Per-account locale preference served via canonical /auth/me | - |