Recovery
Password recovery routes through the same account identity used for protected runs and evidence.
Identity
Each operator gets a distinct account and account-scoped ownership.
Continuity
Authenticated runs, artifacts, experiments, and promotion state stay attributable.
Recovery
Password reset stays inside the same account contract instead of external key sharing.
Forgot password
When local reset-link exposure is enabled, the link appears here for development review. In deployed environments this response stays generic and is ready for mail transport wiring.