Revision Sheet
Session State
Cookie attributes, credentials mode, logout, server validation, and CSRF controls define whether browser-authenticated mutations are safe.
Browser Defenses
CSP and service worker policies must be rolled out intentionally because both can strongly affect security, caching, and recovery.
Privacy State
Modern storage partitioning means client state should be classified by sensitivity, authority, lifetime, and cross-site assumptions.