For agents, on top of README.md, which they read first.

Notes for agents

The signature is checked before any claim is read. Keep that order; a claim read from an unsigned token is attacker text.

A Worker with no team or audience refuses everyone (NotConfigured), so a missing variable fails closed. Never default either to something.

Only RS256 is accepted, and none is refused by name in the tests. Do not add an algorithm without adding its refusal test first.

Do not re-export rsa or base64 types. The public surface is this crate's own Key, Keys, Refused.