Ask for as much proof as the risk warrants
Step-up authentication is the extra proof a system asks for when a sign-in looks risky. Ask for too little and fraud gets through; ask for too much and every honest user pays for a few fraudsters. The design problem is calibration: read the risk in the moment and request only as much proof as it warrants, so a routine login stays a login and a suspicious one gets real scrutiny. I own that experience across login and enrollment, the next layer on top of the authentication and enrollment framework I designed end to end.
Alignment before layout
Early on, before there are screens to review, most of the work is alignment rather than layout. I use vision workshops to bring product, engineering and fraud partners around one experience strategy, so dependencies and constraints show up now instead of halfway through build. I am also guiding two designers on the work, which is as much about setting the direction and holding the bar as it is about drawing the flows.
In progress into 2026
This is live work. The strategy comes first and the flows are in progress; I will add the results here as they are cleared to share.