WordPress REST API Application Password Authentication: Architecture Note
Architecture note for WordPress REST API application‑password authentication: requirements, minimal design, trust boundaries, operational checks, failure modes, and verification steps.