Post

The stateless shift feels right for infrastructure. It also forces a useful design question: which security context belongs on every request, and which state should never be implicit in the transport?