Passkey and recovery map
Decide whether recovery can mint a session that the passkey ceremony would not have issued on its own.
Level: intermediate
Tools: Burp Suite, browser devtools
Pipeline
At {url}, record registration, assertion, and each recovery path you are allowed to use, then compare the session issued after passkey login with the session issued after recovery.