Ledger-Grade Auth Service

A from-scratch authentication layer built for systems that can't afford to be wrong. Argon2id hashing, constant-time verification, per-IP throttling, hardware security-key (WebAuthn) support, and a strict no-enumeration policy. Sessions are rotating and bound to client fingerprints. Designed to be auditable end to end — every trust boundary is explicit.