List view

• OA-M5: Smoke Test + Documentation + Ship

  Live broker smoke + docs + CHANGELOG. Gate: ./scripts/gates.sh full

  No due date

  •0/3 issues closed
  0% complete3 open0 closed

• OA-M4: HTTP Handler + JWKS + Module Wiring

  OAuth endpoints registered on broker mux. Gate: go build ./... && go test ./...

  No due date

  •0/3 issues closed
  0% complete3 open0 closed

• OA-M3: OAuth Service + Audit Events

  OAuthSvc with client_credentials and token_exchange grants. Gate: go test ./internal/oauth/...

  No due date

  •0/3 issues closed
  0% complete3 open0 closed

• OA-M2: OAuth Error Types + Form Parser

  RFC 6749 error format and form-urlencoded parsing. Gate: go test ./internal/oauth/...

  No due date

  •0/2 issues closed
  0% complete2 open0 closed

• OA-M1: Data Model + App Opt-In

  oauth_grants field flows from admin API → service → store → database. Gate: go test ./internal/store/... ./internal/app/...

  No due date

  •0/3 issues closed
  0% complete3 open0 closed