boban 27ebc570f4 docs(spec): WebAuthn/YubiKey 2nd-factor design (Phase 2) ... Optional security-key 2nd factor via web-auth/webauthn-lib, gated on domain + HTTPS (rpId = active domain). TOTP + backup codes stay the required 2FA and the only recovery. Build now with unit/feature tests (mocked ceremony) + R12 gating; real YubiKey end-to-end deferred to a domain+HTTPS host. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 18:12:32 +02:00
..
2026-06-14-account-recovery-design.md	docs(spec): account recovery design (forgot-password, 2FA backup codes, CLI)	2026-06-14 16:41:45 +02:00
2026-06-14-server-details-hardening-polish-design.md	docs(spec): server-details UX + hardening polish design	2026-06-14 10:09:17 +02:00
2026-06-14-webauthn-yubikey-design.md	docs(spec): WebAuthn/YubiKey 2nd-factor design (Phase 2)	2026-06-14 18:12:32 +02:00