Authenticated workspace
Collection · evidence · assessment · provenance
TOTP is optional for this phase.