Commit dea9650

@@ -1,10 +1,10 @@
 # Spike
 
-1. Thrift + GRPC
+1. Twirp + GRPC (authz)
   1. idp (headless)
     * provide a thrift/grpc endpoint that is the equivalent of `Ability.allowed?(subject, permission, resource)`
   1. gitlab
-2. OpenID Connect + OAuth
+2. OpenID Connect (authn) + OAuth (authz)
   * two services
     1. idp (with login pages)
       * user
@@ -15,9 +15,9 @@
       * project
   * OpenID transaction to provide authn information to `gitlab-org/gitlab`
   * OAuth token introspection endpoint to provide token permissions
+4. OPA agent style side car using declarative policy
 3. API Gateway
   * using golang reverse proxy and one of the new policy dsl's
-4. OPA agent style side car using declarative policy
 
 
 ## Identity Provider (SAML IdP)