The harder auth model
Letting people connect their GitHub repos had an easy path (act as the user) and a harder one (a GitHub App with its own identity, scoped permissions and short-lived tokens). I argued for the harder one because later features would need to act when no one was there. Within months, one did.

