Partial login recovery: identify the still-locked-out group

A login recovery update should say which sign-in method now works and which still fails. Compare ordinary password login, SSO, and MFA only if they are relevant to the affected service. Record broad region, device, approximate time with timezone, and the last step reached before an error or loop. Do not post account names, recovery codes, or screenshots showing private identifiers. Avoid repeated attempts that could trigger lockout. The update should show whether the problem is narrowing, not declare an all-clear because one account signed in.