- Document need for institutional authentication
- User detail pages should be restricted to own data
- Job IDs only visible for logged-in user's jobs
- Add implementation tasks for access control

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>