The boring auth boundary was right
Archival claim · Archived · Authentication architecture
Homelab analytics had enough auth surface to accidentally grow a second identity product. The useful decision was to keep identity proof upstream, keep authorization local, and demote local login to a narrow break-glass path.