// payload-data
{
  "iss": "https://auth.example.com",
  "sub": "user@example.com",
  "authz": { "scheme": "RBAC/1.0.2", "roles": ["member"] }
}
// authz-detail
"authz": [
  { "scheme": "RBAC/1.0.2", "roles": ["editor"] },
  {
    "scheme": "/schemas/data-access/v3",
    "datasets": ["analytics"],
    "jur": "HIPAA/1.0/US;GDPR/2.0/DE,FR,NL;CCPA/1.0/US;LGPD/1.0/BR"
  }
]
// delegation-example
{
  "iss": "https://agent-b.example.com",
  "sub": "svc:agent-b",
  "aud": "https://api.target-service.com",
  "tid": "derived-tok-7c8d",
  "iat": 1743900000,
  "authz": { "scheme": "RBAC/1.0.2", "roles": ["editor"] },
  "del": [
    {
      "iss": "https://auth.example.com",
      "sub": "user:4503599627370495",
      "tid": "root-tok-a1b2"
    },
    {
      "iss": "https://agent-a.example.com",
      "sub": "svc:agent-a",
      "tid": "mid-tok-c3d4"
    }
  ]
}