DB ▸ UnitClaimingAppSecurity (0 rows — seed needed)
Validation
V-EMP-01Badge format — 5 digits, or 6 starting with 9 (ValidationUtilities.CheckEmployeeBadgeFormat). Mismatch → “This does not appear to be a valid employee badge number.”, Next refused.
V-EMP-02Cached badge auto-advance — unexpired EmployeeBadgeIdCached prefills and skips forward without typing.
V-EMP-03Access rights — LoadSecurityModel: UnitClaimingUser=false → DeniedAccess step (red “access denied” state). ❌ No web endpoint yet (badge→web-identity open).
V-EMP-04Separate badge timeout (EmployeeBadgeTimeoutSecs) — expiry re-shows this screen even mid-flow.