OpenSpec — A lightweight spec‑driven framework

Each OpenSpec change produces a spec delta that captures the change in requirements of the system. This makes it easy for developers to understand how they're modifying the system and what will need to change. It also allows reviewers to understand the change itself without having to dig through the code and quickly gain a high level understanding.

### Requirement: Session expiration

- The system SHALL expire sessions after a configured duration.

+ The system SHALL support configurable session expiration periods.

#### Scenario: Default session timeout

- GIVEN a user has authenticated

- - WHEN 24 hours pass without activity

+ - WHEN 24 hours pass without "Remember me"

- THEN invalidate the session token

+ #### Scenario: Extended session with remember me

+ - GIVEN user checks "Remember me" at login

+ - WHEN 30 days have passed

+ - THEN invalidate the session token

+ - AND clear the persistent cookie