Authentication

This is a proposal for Harbor, not an Entwine capability. Return to architecture for the system context.

Session boundary

A future session identifies a writer. Public catalogue reads remain anonymous.

Failure behavior

An expired session must reject mutations. It must not prevent public search.

expired session → reject write → preserve catalogue