Assess account recovery — alternative authentication, recovery proof, takeover handling, and enterprise operations. Use when the user asks to review password reset, recovery flows, account takeover handling, or SSO recovery. Do not use to design the recovery flow.
