authentication-session-validationlisted

# Authentication and Session Validation ## Outcome Create repeatable, role-aware tests for the application's approved authentication and session lifecycle with durable results and attempt-scoped evidence. ## When to use Use after Basic Browser Setup when authentication behavior needs coverage beyond establishing one working test session. Include only flows enabled and authorized for the customer environment. ## Discovery and user direction Inspect the current workflow, goals, metrics, configuration, capabilities, stores, reports, and triggers before proposing changes. Summarize reusable design and gaps, then ask focused questions for unresolved customer choices such as scope, success, approvals, thresholds, ownership, and budgets. Record the answers as customer direction. Installation alone does not approve workflow changes or execution. Default to one small-team workflow; split only for incompatible access or lifecycle boundaries. ## Required inputs Resolve authentication methods, actor roles, approved expectations, account ownership, MFA/recovery channels, session lifetime rules, lockout limits, allowed state changes, evidence retention, and cleanup/reset procedures. ## Plan and AgentWorks tools Use scripted steps for repeatable Playwright scenarios and deterministic persistence. Use a message sequence for evidence-based investigation. Add branches only for real outcome paths or configured review. Reuse selected secrets and never pass secret values through plan co