MVP cut line
Include in the first functional MVP
Owner signup, email verification, password login, and secure sessions.
System Admin Owner creation of gift accounts.
Tenant and Owner separation.
Primary Author creation.
Four local keypair-generation claims.
Fifth public-bundle verification claim.
One-device, three-device, and five-device bootstrap modes.
Public-key and component-version storage.
Signed Author API requests.
Authentication-plus-purpose signatures.
Parent-child Key hierarchy.
Immutable policy versions.
Child permission subset validation.
Additional Primary, Secondary, Use, and Keyring types.
Authored-object signing and verification.
Immediate suspension and revocation.
Component rotation.
Historical public-key retention.
Owner lineage views.
Owner activity and permission views.
Append-only event records.
Basic alerts.
Encrypted local client key file.
Reference PHP CLI.
PostgreSQL backup and restoration procedure.
Explicitly defer
Real payment processing.
Hardware CRE8 device.
Threshold signatures.
Shamir secret sharing.
Multi-parent delegation.
Distributed offline authorization.
Blockchain anchoring.
Public transparency log.
Multi-region deployment.
Webhooks.
Complex channels and group encryption.
Mobile applications.
Third-party identity federation.
Policy language engines such as OPA.
Redis and distributed nonce caching.
Microservices.