{
  "scenario": "passkey-primary operator retains emergency recovery codes",
  "controls_that_remain_required": [],
  "controls_that_change": [],
  "factor_equivalence_claimed": false,
  "evidence_basis": [],
  "residual_risk": ""
}