Grand Algo

Both factors are required. Failed attempts are rate-limited and every attempt is logged. There is no IP allowlist by design — the owner is on mobile — so this form is the perimeter (plan §17 decision 8).