Every requirement across initiatives that lands in the Identity & Access bounded context — RBAC, tenant isolation, auth flows.