stabilize tests

src/Authority/AGENTS.md

@@ -0,0 +1,23 @@
+# AGENTS - Authority Module
+
+## Working Directory
+- `src/Authority/**` (Authority service, libraries, plugins, tests).
+
+## Required Reading
+- `docs/README.md`
+- `docs/07_HIGH_LEVEL_ARCHITECTURE.md`
+- `docs/modules/platform/architecture-overview.md`
+- `docs/modules/authority/architecture.md`
+- `docs/modules/authority/README.md`
+
+## Engineering Rules
+- Enforce authn/authz on every surface; default-deny for new endpoints.
+- Preserve determinism for token/evidence workflows (stable ordering, UTC timestamps).
+- No plaintext secrets in logs or storage.
+
+## Testing & Verification
+- Tests live in `src/Authority/__Tests/**`.
+- Cover authz policies, error handling, and offline behavior.
+
+## Sprint Discipline
+- Record decisions and risks for security-sensitive changes in the sprint file.