# Identity acceptance boundary

Automated identity tests live with the Go package at
`Sense/server/app/sense/identity`. They use generated, non-production values
and never contain a real password, token, cookie or signing key.

The acceptance checks cover bootstrap uniqueness, password hashing, login,
role permissions, product-specific token validation, session revocation and
audit records. PostgreSQL migration execution remains a deployment-environment
integration check.