chore(deps): bump pyjwt from 2.15.0 to 2.15.1

api/requirements.txt

@@ -2,7 +2,7 @@ fastapi==0.143.0
 uvicorn[standard]==0.54.0
 pydantic==2.13.5
 httpx==0.28.1
-pyjwt==2.15.0
+pyjwt==2.15.1
 passlib[bcrypt]==1.7.4
 jsonschema==4.26.0
 pyyaml==6.0.3

project/TICKETS.md

@@ -9,4 +9,5 @@
 | **ticket-004** | [`README.md`](./ticket-004/README.md) | - | - | - | - | - |
 | **ticket-621** | [`README.md`](./ticket-621/README.md) | - | - | - | - | - |
 | **ticket-622** | [`README.md`](./ticket-622/README.md) | - | - | - | - | - |
+| **ticket-623** | [`README.md`](./ticket-623/README.md) | - | - | - | - | - |
 <!-- AUTO:TICKET_INDEX:END -->

project/ticket-623/README.md

@@ -0,0 +1,15 @@
+# Ticket 623: Dependency maintenance: api pyjwt requirement
+
+- **ID**: ticket-623
+- **Owner**: agent:claude
+- **Status**: IN_PROGRESS
+- **Workflow state**: EDIT
+- **Created**: 2026-10-23
+
+## Goal and scope
+
+Own the automated api/requirements.txt dependency updates (interfaces workstream).
+
+## Acceptance criteria
+
+- [ ] AC-01: the automated pyjwt update resolves to this ticket and passes the governance gate.

project/ticket-623/intent.json

@@ -0,0 +1,73 @@
+{
+  "schema": "new-project.intent/v3",
+  "ticket": "ticket-623",
+  "summary": "Dependency maintenance: api pyjwt requirement",
+  "workstream": "interfaces",
+  "classification": {
+    "kind": "SERVICE",
+    "priority": "P2",
+    "origin": "health"
+  },
+  "allowedPaths": [
+    "project/ticket-623/**",
+    "TODO.md",
+    "project/TICKETS.md",
+    "api/requirements.txt"
+  ],
+  "forbiddenPaths": [
+    "project/ticket-*/user-*.md"
+  ],
+  "stacks": [],
+  "dependsOn": [],
+  "conflictsWith": [],
+  "integrationTicket": null,
+  "delivery": {
+    "acceptedBaseSha": "1e18d9dc56f419bbcea26b2fe71a9220e3207819",
+    "targetBranch": "main",
+    "outcome": "Automated api dependency updates carried through the interfaces workstream.",
+    "nonGoals": [
+      "runtime code changes"
+    ],
+    "complexity": "L",
+    "estimatedMinutes": 60,
+    "budgets": {
+      "maxImplementationFiles": 15,
+      "maxAffectedComponents": 5,
+      "maxPublicInterfaceChanges": 3,
+      "maxRuntimeDependencies": 3
+    },
+    "architecture": {
+      "status": "accepted",
+      "decision": "No architecture change; requirement pin refresh only.",
+      "components": [
+        {
+          "name": "api",
+          "paths": [
+            "api/**"
+          ]
+        }
+      ],
+      "responsibilityChanges": false,
+      "interfaceChanges": [],
+      "dataChanges": [],
+      "ui": {
+        "impact": "none",
+        "states": [],
+        "evidence": []
+      },
+      "rollback": "git revert the bump commit"
+    },
+    "runtimeDependencies": [
+      "pyjwt"
+    ],
+    "validation": [
+      {
+        "criterion": "AC-01",
+        "commands": [
+          "project/governance-check.sh"
+        ],
+        "evidence": "governance gate GOV-PASS on the PR diff"
+      }
+    ]
+  }
+}