The user storage layer is now fully self-built (own tables such as panda_users plus domain services); the OpenIddict protocol layer is retained.
Existing Argon2id hashes migrated as-is, so no user needs to reset a password; the old Identity tables are kept for an observation period.
The direction was opened as a decision record on 2026-09-20; a later batch completed the migration and deployed it to production (decision status: “deployed; observation period and capability completion under way”).
