# REQ-p00001: User Authentication

**Level**: PRD | **Status**: Active | **Implements**: -

## Assertions

A. The system SHALL provide secure user authentication.
B. The system SHALL support email and password login.
C. The system SHALL NOT allow unauthenticated access to protected resources.

## Rationale

Security and compliance require verified user identity.

*End* *User Authentication* | **Hash**: a1b2c3d4
---

# REQ-p00002: Session Management

**Level**: PRD | **Status**: Active | **Implements**: -

## Assertions

A. The system SHALL maintain user sessions.
B. The system SHALL expire sessions after 30 minutes of inactivity.

*End* *Session Management* | **Hash**: b2c3d4e5
---
