- Issue JWT to all verified Novi users, not just moderators; unauthenticated URL access no longer sufficient to join an IDAA video conference - Remove 'embedmeeting' from Jitsi toolbar via explicit toolbarButtons whitelist; the embed dialog exposed the Jitsi host/room URL violating IDAA privacy rules Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>