JWT Secret and Allowlist Drift

JWT validation breaks or security rules become ineffective when secrets/claims validation and egress allowlists drift—tokens get signed in one place, validated incorrectly elsewhere, and legitimate-looking requests from allowed IPs bypass intent.