# Project Notes

- Keep `README.md` current when changing purpose, flows, APIs, scopes, configuration, deployment, or implementation status.
- Treat `README.md` as the first project source of truth until a dedicated `docs/` structure exists.
- The implementation language is C# / ASP.NET Core.
- Member Center remains the OAuth2/OIDC issuer and JWKS provider. This project is the file access boundary for `file_access_api`.
- `tenant_id` is part of the File Access boundary model.
- Delegated download token issuing and validation live in Member Center; this project must integrate with its validation endpoint rather than becoming a second token issuer.