Guardian Security
Identity, sessions, consent, permissions, publishing authority, and recovery.
Secure session
ActiveHTTP-only, SameSite session cookie
Email verification
PlannedRequired before publishing or inviting collaborators
Two-factor authentication
PlannedTOTP and recovery codes
Consent registry
RequiredRequired for voice, face, memory, and Infinity identities
Publishing protection
EnforcedDraft → scan → validation → approval → publish
Audit history
RequiredTracks access, changes, AI actions, and publishing