Default security runtime: authorization engine, action registry, in-memory policy resolvers, security event emitter, and Dagger modules

Event bus service dispatch with contract-first interfaces and resilience policies

Authentication, authorization, and security context bridging for the REST framework

JWT bearer token authentication for the REST framework

Annotation-driven WebSocket endpoint module with lifecycle hooks and typed message handling

Config-backed authorization adapters: policy definition and role-policy resolvers driven by vertique-config-core

Workflow timers and signal-wait timeouts: transactional delayed-job enqueue, source-of-truth timer table, orphan and dead-letter recovery.