RS256 JWT · PDPA Compliant · Append-only audit log