Review Account Recovery

Recovery is alternative authentication, not a support exception. Support-assisted recovery must not skip proof the product would require of the user. A recovery path weaker than login is the product.

Open recovery state and proof for eligibility and session repair. Open compromise and enterprise for takeover, SSO, or high-value roles.