#121 Ingestion: footnote numbers are not unique across a report, but the pipeline assumes they are

#1341 Read 'The "Property Based Testing" series'

#124 Add admin dashboard UI (Templ + HTMX + DaisyUI)

#123 Move email/webhook delivery to async via RiverQueue

#122 Add Prometheus metrics for auth operations

#121 Add persisted audit log for auth events

#120 Unify impersonation detection between cookie-mode and JWT-mode

#119 Support asymmetric JWT signing (RS256/EdDSA) + JWKS endpoint

#118 Add refresh-token reuse/theft detection

#117 Add device/session listing with remote revocation

#116 Add scoped API keys (permissions per key)

#115 Add multi-tenancy (organizations/teams with per-org roles)

#114 Add real RBAC (roles/permissions tables + enforcement middleware)

#113 Add admin user management API (list/search/suspend/reactivate)

#112 Add guarded email-change flow with re-verification

#111 Add invitation-based onboarding flow