- resolve_decision_statescope new services
- Reading the sources in the registryADR-042 · Security review, Jan 2026
- State resolvedIn force
auth-core v3 is the standard authentication library for new services.
In force · scope new services · from 10 Feb 2026 · supersedes ADR-017, Passport
auth-core v3. Source: ADR-042, February 2026. ADR-017 (Passport) is superseded.
Sources
- ADADR-042
New services use auth-core v3 for authentication and sessions. ADR-017 (Passport) is superseded.
Primary - SRSecurity review, Jan 2026Evidence

Decision registry
