Errors and the response envelope

One shape for every refusal, and the codes to match on.

Not written yet

This page is a placeholder. The writing lands in slice 7, against the source rather than from memory.

Authentication

Two credential types, and the rule for when to use which.

Roles and the permission matrix

The floor every guarded operation sits at.