# schematize blueprints

> Blueprints of specific, essential systems — how to build them, the house way. Each blueprint is a buildable recipe with the non-negotiable engineering floors and the reasoning behind them.

Every blueprint is a human page at /<slug>/, raw Markdown at /<slug>.md, and JSON at /<slug>.json. The whole corpus in one file is at /llms-full.txt.

## Blueprints

- [How to build an IAM broker](https://blueprint.schematize.org/iam-broker.md): A single front door for identity: one standalone service every app delegates auth to via OIDC / OAuth 2.1 + PKCE — with identity ≠ email, a 2-factor baseline, rotating refresh tokens, a risk engine, and thin, verifiable tokens.