This example outlines a strawman architecture for **automerge-auth**, a proposed successor to the `localfirst/auth` library, by defining key TypeScript classes and workflows in a markdown document. It shows how a `Group` class unifies users, devices, and subgroups into a single transitive membership model, while a `Connection` class provides point-to-point encrypted channels and an `AuthProvider` integrates with `automerge-repo` via network and storage adapters. The sketch maps desirable features like untrusted sync servers and flexible sharing against existing lf/auth patterns, using diagrams and pseudocode from the gist.