LoginRecovery
Corex\Config\Security\LoginProtection\LoginRecovery · class · Config layer
Whether login recovery is on: define( 'COREX_LOGIN_UNGUARD', true ); in wp-config.php, the break-glass an owner with no command line can set from the host’s file manager. The constant is fixed before WordPress loads, so the container reads it once and hands this one answer to everything that acts on it ({@see LoginRouteGuard}) or reports it (the Security Center, spec 112 FR-022). Nothing else reads the constant.