# Auton 1.5.1

Isolate job identifiers and active-job quotas by principal.

Jobs keep their public `endpoint:id` format. Different principals can submit
the same ID and see only their own output, including after recovery from SQLite
or Redis. Older history is read directly. Back up durable history before upgrading
and restore the backup if reverting to an older daemon.

The new `general.max_jobs_per_user` limit defaults to half of `max_jobs`, rounded
up, across all endpoints. Anonymous jobs share a principal. A quota refusal
returns 429, a duplicate returns 409, and invalid arguments return 400. OIDC
allows 30 seconds of positive clock skew for issued-at while retaining the expiry
deadline. The client recognizes quota and duplicate refusals.