- Add OIDC result and expect client seam with pinned native AppAuth semantics - Add secure AuthState JSON store contract and JVM dev actuals for test compilation
- Desktop main() calls configureLogging() → initKoin() before application { Window { App() } } - Wasm main() calls configureLogging() → initKoin() before ComposeViewport { App() } (PITFALL #8 future-proof) - iOSApp.swift imports ComposeApp and calls KoinIosKt.doInitKoin() in init() — single iOS call site (PITFALL #4) - MainViewController.kt and App.kt unmodified (anti-pattern guards)
