audit-authn-session

name	audit-authn-session
description	Authentication and session audit checklist. Use when reviewing login, logout, password reset, token issuance, session expiry, or remember-me flows.

Read ../audit/references/access-data-security/authn-session.md and apply its checklist to the code the user specified (or the current diff if none was given). Verify each candidate with ../audit/references/methodology/verify.md before reporting. Report findings with severity and file:line references.