Server-side session records rotate identifiers on privilege change, revoke an entire session family on logout or compromise, and expose list-and-revoke evidence in the account UX without storing secrets in cookies.
This Block has no declared dependencies.