What the account-recovery search screen is opened with: the account-access
token the login home's process state holds and the opaque ticket of its
issued "Forgot password" action. The raw issued params never cross this
boundary. The ticket is optional only because the login home declares the
edge regardless of its action graph; the enter refuses, with the recovery
step's own error, when the launch issued no entry; a ticket it does not know is
AccountRecoveryTicketUnknownError.
What the account-recovery search screen is opened with: the account-access token the login home's process state holds and the opaque ticket of its issued "Forgot password" action. The raw issued params never cross this boundary. The ticket is optional only because the login home declares the edge regardless of its action graph; the enter refuses, with the recovery step's own error, when the launch issued no entry; a ticket it does not know is
AccountRecoveryTicketUnknownError.