HTTP Endpoints with RBAC: - ingest_handler: project-level write access check - learn_handler: project-level write access check - projects_handler: filter returned projects by user access - query_handler: filter search results by resource access - context_handler: project-level read access check Example Role Configurations (config/roles/): - admin.yaml: full access to all resources - portfolio-agent.yaml: public visitor access - authenticated-user.yaml: logged-in user access - homelab-team.yaml: team-scoped project access All 660+ tests passing.