Recover access without losing authority.

Real recovery will require a verified channel and will never move membership between tenants.

• Identity and documents sealed by default
• Authority limited to the session tenant
• Verified email before account activation