boban f0a337c8bd docs(spec): account recovery design (forgot-password, 2FA backup codes, CLI) ... Phase 1: 2FA recovery codes (encrypted, show-once + downloadable, usable at the challenge), a forgot-password flow (2FA-code proof primary, email link only when SMTP is configured), and a clusev:reset-admin CLI lockout fallback. WebAuthn is deferred to a Phase-2 spec. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 16:41:45 +02:00
..
2026-06-14-account-recovery-design.md	docs(spec): account recovery design (forgot-password, 2FA backup codes, CLI)	2026-06-14 16:41:45 +02:00
2026-06-14-server-details-hardening-polish-design.md	docs(spec): server-details UX + hardening polish design	2026-06-14 10:09:17 +02:00