Status. Proposed design only. Nothing in this vault is GGA client approval. The GGA client documents are supplied drafts: see GGA-Source-Digest. No application, service or test has been executed; every scenario is Not executed. Delivery fees and dates are open.

T37 · Authentication, invitation and session controls hold

Field	Value
Status	Not executed
Type	Balanced software
Layer / kind	API · security · configuration
Priority	P0
Gates	A06, A10
Build step	01 (GGA order; the 1.3 step is history)
Decisions	Q09

Disposition under GGA

Field	Value
Disposition	Retained and extended
GGA basis	Blueprint pp. 4, 14, 17 (GGA-Requirement-Register)
Replaced or carried by	GS26-staged
Still open	GL07-staged
What changes	Verified work contact, invitation expiry, MFA for privileged staff and mature authentication components.

The 1.3 text below is kept verbatim as history. Where the disposition is Reframed, Superseded or Parked it is not the GGA oracle; use the replacing scenario. A Parked scenario has no GGA feedback and stays a Proposed carry-forward. The status stays Not executed. Register: Scenario-Dispositions.

Given

DG admin without MFA, expired/used invitations and valid/invalid sessions are available in an isolated test environment.

When

Try protected admin actions without MFA; redeem invitation twice; replay revoked sessions and tampered cookies; send CSRF attempts where applicable.

Then / oracle

MFA protects DG admin operations; invitations are single-use/expire under policy. Sessions and browser mutations are protected; secrets are never returned. Positive authenticated flows remain usable.

Evidence required

Identity-provider test evidence; configuration review; token-redacted request traces.

Decision dependency (verbatim)

Q09: provider, token/session lifetimes and account-recovery policy; no SSO scope assumed.

Source: TDD rev 1.3 (PDF); machine-readable in 10-Sources/tdd-bundle/. Back to Scenario-Index · Traceability-Matrix · integration dependencies in Dependency-and-Regression-Table.