- WS: two auth methods (query param JWT for web, auth message for agents) - URLs: /ws and /api/v1 directly (no more /agent-ws, /agent-api/) - Humans get all events without subscriptions