Checking same-origin session.
AXIOM does not store bearer or refresh tokens in browser storage.
Creates an immutable browser-local contract and linked Project task. It does not execute consequential action.