Security

Security is a boundary, not a page claim.

JOYNS applies current-state authorization and deny-by-default behavior across sensitive operations.

Permanent Identity is distinct from mobile identifiers

Permanent Identity is distinct from mobile identifiers.

Realm and Entity scope is enforced server-side

Realm and Entity scope is enforced server-side.

Tokens, OTPs, secrets and encryption keys are excluded from audit payloads

Tokens, OTPs, secrets and encryption keys are excluded from audit payloads.