Adapter Authentication Should Never Outlive the Session

Adapter credentials that persist beyond their session become ambient authority, and ambient authority is what turns a small compromise into a large one.

A credential that outlives its session is authority waiting for a new owner. Session binding means the authority evaporates when the legitimate use ends.

Session binding in practice

• Credentials issue at session start and revoke at session end.
• Reconnects re-authenticate rather than resuming old tokens.
• Credential lifetime metrics alert on anything outliving its session.

Use the AuthGuardian, security docs, and threat model to keep adapter authority scoped to living sessions.