Task — engineering-spec@1

"JWT hardening: aud always, iss pin, JWKS refetch on unknown kid"

draftTASK-CHAT-202
module chat · class product · priority p0 · created 2026-07-08 · shipped null
depends on none · blocks none

TASK-CHAT-202: JWT hardening: aud always, iss pin, JWKS refetch on unknown kid

1. Description

Author the normative clauses when this task is picked up; it was migrated as a draft stub.

Migrated 2026-07-08 from the chat improvement backlog, folded into the task system as class: improvement. Source report refs: C47, C48.

Acceptance criteria