| login provider |
Answers who may establish an identity at all. |
| role resolution |
Turns identity into stable capabilities. |
| path rules |
Lets one site host public and restricted branches together. |
| drawing passwords |
Protects individual Excalidraw assets without inventing full RBAC for every sketch. |