Immortal Client-Trusted Session
Kind: anti-pattern
Layer: Security Core
Record: lexicon:immortal-client-trusted-session
Canonical: Lexicon
A session that never expires and is trusted from client-supplied state alone, so a captured token grants indefinite access.
Listed in Lexicon terms, after Hardcoded Secrets and before Insecure Defaults.