List recently chosen models
The models chosen in a client, most recent first, bounded — the shortlist a model picker offers above the full catalogue so somebody alternating between two models never scrolls for either. The head of this list is also the default a session opened with no explicit model adopts. A model no longer in the catalogue is absent here rather than listed as unusable.
Authorizations
Enforced on every transport, with no exempt operation. A person's request — over the default local unix socket exactly as over a TCP listener — must carry a JWT issued by the configured identity provider, which the host verifies itself against that issuer's key set: signature, issuer, expiry, and the person and organisation it names. Requests without a valid one receive 401 NRY-0011. The socket's file permissions are transport and are not an authorisation.

