---
id: w4/m11/t007
title: Render parity — MFA surface check (settings/login UI) vs Render's 2FA
worker: worker4
status: done
estimate: 15m
depends_on: [w4/m11/t004]
---

## Objective

Standing closing task (retrofitted 2026-07-09). The surface here is the dashboard only (Kratos owns the flows — no bex REST/GraphQL/MCP change; note that). Compare the shipped experience against Render's 2FA (TOTP enrollment in account settings, challenge at login, recovery codes): enrollment placement, challenge behavior, recovery-code UX. Update docs/ADR018-render-parity.md's MFA row (✖ → ✅/◐ with evidence); flag drift worth fixing as follow-up notes.

## Acceptance criteria

- [ ] Parity matrix MFA row updated with evidence; any UX drift filed, not silent.
