decisions_log:
  - question: What authentication method will be used?
    decision: >
      Role-based authentication with support for TOTP-based 2FA.
    rationale: >
      This provides a good balance between security and usability while supporting
      enterprise-level security requirements.
  - question: How will user permissions be handled?
    decision: >
      A granular permission system based on roles and capabilities.
    rationale: >
      This allows for precise control over what actions users can perform while
      maintaining a simple and understandable permission model.