SPARXSTAR 2FA Enforcement

SPARXSTAR 2FA Enforcement Version: 0.5.0 Type: WordPress MU-Plugin Requires: PHP 7.2+, WordPress Multisite, Official Two-Factor Plugin by WordPress Security Model: Configuration-as-Code Overview SPARXSTAR Enterprise 2FA Enforcement (Hardened) is a strict, role-aware Two-Factor Authentication enforcement layer designed for high-compliance WordPress Multisite environments. This plugin does not replace the official WordPress Two-Factor plugin. It extends and hardens it by enforcing deterministic rules around: Who must use 2FA Which 2FA methods are allowed by role How frontend-only users complete 2FA How administrators recover from lockouts safely It is built to work cleanly and safely alongside: WordPress Multisite Mercator (domain mapping) by Human Made Mercator-Redirect by Human Made Cross-domain SSO scenarios Design Principles Configuration as Code No UI settings. All policy is defined in constants. Fail-Safe by Default If the core Two-Factor plugin is disabled, this MU-plugin exits silently (with an admin notice). Strict Role Boundaries No loose capability checks (editposts etc.). Only explicit role allowlists are trusted. Frontend-Safe Enforceme