Foundation: correct, tested, version-controlled core
A layered API with real auth, provably blocked cross-tenant access, and a commit history a reviewer could follow.
Definition of done
`npm test` / `pytest` passes, cross-org access is provably blocked by a test, and your commit history reads like a story a reviewer could follow.
Tasks
t2-p1-01
authored
Repo setup with a layered structure
2–4ht2-p1-02
authored
Core data models and a multi-tenancy strategy
4–7ht2-p1-03
authored
Task CRUD with validation and correct status codes
4–7ht2-p1-04
authored
Authentication with hashed passwords and JWT
4–7ht2-p1-05
authored
Authorization - cross-org access blocked
3–6ht2-p1-06
authored
Unit test suite over the service layer
5–8ht2-p1-07
authored