Framework-neutral security engine: authority mapping, the @Secure authorization evaluator, the embedded policy decision point, introspection caching and principal projection

Reactive Spring Security binding: principal projection, ReactiveSecurityContext access, and the URL policy enforcement point

Reactive method security: @EnableReactiveMethodSecurity plus the @Secure interceptor backed by the core authorization evaluator

Optional servlet-only OAuth2/OIDC Authorization Server (Spring Authorization Server) with JWKS sourced from the framework KeyManagementPort. Deployed separately from reactive resource servers.