Checkpoint 1: Authentication Architecture

Use the Authentication Architecture you built in Lesson 3 as your Week 2 mastery artifact.

Submit

Your one-page architecture must identify:

• the fictional system and users;
• the assets that need protection;
• authentication factor(s) and why they fit the risk;
• authorization roles after login;
• a recovery path that is not weaker than normal sign-in;
• logging/alert events;
• the account lifecycle from creation through removal;
• results of the four threat-test scenarios;
• trade-off scores for security, usability, recovery, cost, privacy, and accessibility.

Add a short note explaining why password storage is not the same thing as encoding or encryption, using the week’s hash/salt work as evidence.

Defense question

Answer in 3-5 sentences:

Which failure would your design handle best, and which failure still creates the most risk?

Scoring

This is a teacher-reviewed mastery checkpoint.

The common GSC I rubric scores five areas from 0-4:

• technical accuracy
• evidence quality and reproducibility
• reasoning and trade-offs
• safety and authorization
• communication

Maximum: 20 points.

The Robotnix mastery target is 15/20 or higher with no criterion below 2. If the evidence is incomplete or a claim reaches beyond what the evidence supports, revise and resubmit.