Help me trace an authentication flow for privilege gaps, stale sessions, and unsafe defaults.
Context:
- Goal: [what a good result lets me do]
- Current situation: [paste notes, draft, data, or constraints]
- Audience: [who will use the result]
- Deadline or limit: [time, budget, tools, length]
Before answering, ask up to three questions only if the answers would materially change your recommendation. Otherwise, state your assumptions and continue.
Give me:
- A practical first pass I can use now
- The main trade-offs or risks
- The smallest check or test to run next
- What information would change your answer
If a fact is missing, label the gap instead of inventing a detail. Use direct language. Keep the result specific to the context I provide.