diff --git a/CHANGELOG.md b/CHANGELOG.md
index 106b647..1462520 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ All notable changes to this project will be documented in this file. The format
 
 ### Changed
 
+- [#332](https://github.com/mohanagy/miftah/issues/332) Turned Console management navigation into five focused, keyboard-accessible sections: Overview, Accounts, Authentication, Client setup, and Audit. Only the selected task is shown; the non-secret URL fragment restores a valid selection after refresh or reauthentication, while switching tasks leaves in-page form drafts untouched and performs no writes. Destructive account removal remains confined to Accounts, and existing redaction, audit, OAuth, containment, no-shell, and public API guarantees are unchanged.
 - [#331](https://github.com/mohanagy/miftah/issues/331) Made Console account switching read like a user action: each named account now offers a client-specific `Use <account> in this chat` action, copied-request confirmation names the account and selected client, and the durable default is described as applying to new MCP sessions. Shared guidance appears once instead of on every connection card. The existing `miftah_use_profile` request, supported clients, redaction, audit, credential handling, containment, and public APIs are unchanged.
 
 ## [0.5.6] - 2026-07-31
diff --git a/src/console/console-assets.ts b/src/console/console-assets.ts
index d4e25b5..06c7d17 100644
--- a/src/console/console-assets.ts
+++ b/src/console/console-assets.ts
@@ -270,22 +270,25 @@ const page = `<!doctype html>
       </details>
 
       <div id="workspace-view" hidden>
-        <nav id="workspace-task-navigation" aria-label="Connection tasks">
-          <a href="#connection-overview">Overview</a>
-          <a href="#connection-accounts">Accounts</a>
-          <a href="#connection-authentication">Authentication</a>
-          <a href="#connection-client-setup">Client setup</a>
-          <a href="#connection-audit">Audit</a>
+        <nav id="workspace-task-navigation" aria-label="Connection tasks" role="tablist">
+          <a id="workspace-task-overview" href="#connection-overview" role="tab" aria-controls="connection-overview" aria-selected="true" tabindex="0" data-workspace-task="connection-overview">Overview</a>
+          <a id="workspace-task-accounts" href="#connection-accounts" role="tab" aria-controls="connection-accounts" aria-selected="false" tabindex="-1" data-workspace-task="connection-accounts">Accounts</a>
+          <a id="workspace-task-authentication" href="#connection-authentication" role="tab" aria-controls="connection-authentication" aria-selected="false" tabindex="-1" data-workspace-task="connection-authentication">Authentication</a>
+          <a id="workspace-task-client-setup" href="#connection-client-setup" role="tab" aria-controls="connection-client-setup" aria-selected="false" tabindex="-1" data-workspace-task="connection-client-setup">Client setup</a>
+          <a id="workspace-task-audit" href="#connection-audit" role="tab" aria-controls="connection-audit" aria-selected="false" tabindex="-1" data-workspace-task="connection-audit">Audit</a>
         </nav>
-        <section id="connection-overview" class="summary" aria-label="Configuration summary">
-          <article><p class="summary-label">Configuration</p><strong id="config-name">—</strong><span id="config-version">—</span></article>
-          <article><p class="summary-label">Default account for new MCP sessions</p><strong id="default-profile">—</strong><span>Existing sessions keep their active account.</span></article>
-          <article><p class="summary-label">Live account switch</p><strong id="profile-switching-state">—</strong><span id="profile-switching-copy">—</span></article>
-          <article><p class="summary-label">Audit journal</p><strong id="audit-state">—</strong><span>Redacted local lifecycle records only.</span></article>
+        <section id="connection-overview" class="workspace-task-panel" role="tabpanel" aria-labelledby="workspace-task-overview" tabindex="0">
+          <div class="summary" aria-label="Configuration summary">
+            <article><p class="summary-label">Configuration</p><strong id="config-name">—</strong><span id="config-version">—</span></article>
+            <article><p class="summary-label">Default account for new MCP sessions</p><strong id="default-profile">—</strong><span>Existing sessions keep their active account.</span></article>
+            <article><p class="summary-label">Live account switch</p><strong id="profile-switching-state">—</strong><span id="profile-switching-copy">—</span></article>
+            <article><p class="summary-label">Audit journal</p><strong id="audit-state">—</strong><span>Redacted local lifecycle records only.</span></article>
+          </div>
+          <p id="active-profile-guidance" class="restart-note"><strong>Active vs durable:</strong> Console changes update configuration on disk. Existing MCP sessions keep their active account.</p>
         </section>
-        <p id="active-profile-guidance" class="restart-note"><strong>Active vs durable:</strong> Console changes update configuration on disk. Existing MCP sessions keep their active account.</p>
 
-        <section id="connection-accounts" class="work-section" aria-labelledby="profile-inventory-title">
+        <div id="connection-accounts" class="workspace-task-panel" role="tabpanel" aria-labelledby="workspace-task-accounts" tabindex="0" hidden>
+        <section class="work-section" aria-labelledby="profile-inventory-title">
           <div class="section-heading">
             <div><p class="step">Configured accounts</p><h2 id="profile-inventory-title">Know which accounts are available</h2></div>
             <p>These are profile names and non-secret labels only. Miftah does not read credentials, headers, launch arguments, token caches, or OAuth vault data to build this list.</p>
@@ -347,8 +350,9 @@ const page = `<!doctype html>
           <p class="field-note">Profiles with native OAuth bindings stay protected: Miftah will not split configuration deletion from OS-vault cleanup until it can do both atomically.</p>
           <p id="profile-removal-result" class="field-note" role="status" aria-live="polite"></p>
         </section>
+        </div>
 
-        <div id="connection-authentication" class="workspace-task-group">
+        <div id="connection-authentication" class="workspace-task-panel" role="tabpanel" aria-labelledby="workspace-task-authentication" tabindex="0" hidden>
         <section id="provider-authentication-view" class="work-section provider-authentication" hidden aria-labelledby="provider-authentication-title">
           <div class="section-heading">
             <div><p class="step">Authentication ownership</p><h2 id="provider-authentication-title">Authentication setup</h2></div>
@@ -439,7 +443,7 @@ const page = `<!doctype html>
         </section>
         </div>
 
-        <section id="connection-client-setup" class="work-section split" aria-labelledby="client-title">
+        <section id="connection-client-setup" class="workspace-task-panel work-section split" role="tabpanel" aria-labelledby="workspace-task-client-setup" tabindex="0" hidden>
           <div>
             <p class="step">Client handoff</p>
             <h2 id="client-title">Review and copy configuration</h2>
@@ -464,7 +468,7 @@ const page = `<!doctype html>
           </div>
         </section>
 
-        <section id="connection-audit" class="work-section" aria-labelledby="audit-title">
+        <section id="connection-audit" class="workspace-task-panel work-section" role="tabpanel" aria-labelledby="workspace-task-audit" tabindex="0" hidden>
           <div class="section-heading">
             <div><p class="step">Recent activity</p><h2 id="audit-title">Redacted Console audit</h2></div>
             <button id="refresh-dashboard" type="button" class="secondary">Refresh</button>
@@ -575,7 +579,9 @@ button.danger { color: #ffd7cf; background: transparent; border: 1px solid #7043
 #workspace-task-navigation { display: flex; flex-wrap: wrap; gap: .55rem; margin: 0 0 1rem; }
 #workspace-task-navigation a { display: inline-flex; min-height: 2.75rem; align-items: center; padding: .55rem .85rem; color: var(--ink); background: var(--panel-raised); border: 1px solid var(--line); border-radius: .28rem; text-decoration: none; font-weight: 700; }
 #workspace-task-navigation a:hover { border-color: var(--key); }
+#workspace-task-navigation a[aria-selected="true"] { color: #19150d; background: var(--key); border-color: var(--key); }
 #workspace-task-navigation a:focus-visible { outline: 2px solid var(--key); outline-offset: 2px; }
+.workspace-task-panel[hidden] { display: none; }
 #connection-overview, #connection-accounts, #connection-authentication, #connection-client-setup, #connection-audit { scroll-margin-top: 1rem; }
 .summary article { display: flex; min-height: 9rem; flex-direction: column; gap: .45rem; padding: 1.25rem; background: var(--panel); }
 .summary strong { font: 500 1.5rem/1.15 Georgia, serif; }
@@ -644,6 +650,14 @@ const script = `(() => {
   const presetOnboardingView = byId("preset-onboarding-view");
   const clientEntryOnboardingView = byId("client-entry-onboarding-view");
   const workspaceView = byId("workspace-view");
+  const workspaceTaskNavigation = byId("workspace-task-navigation");
+  const workspaceTaskPanels = [
+    byId("connection-overview"),
+    byId("connection-accounts"),
+    byId("connection-authentication"),
+    byId("connection-client-setup"),
+    byId("connection-audit")
+  ].filter((panel) => panel instanceof HTMLElement);
   const configurationCatalogView = byId("configuration-catalog-view");
   const configurationCatalog = byId("configuration-catalog");
   const configurationCatalogSummary = byId("configuration-catalog-summary");
@@ -727,6 +741,56 @@ const script = `(() => {
     if (status && typeof text === "string") status.textContent = text;
   }
 
+  function workspaceTaskIdFromHash(hash) {
+    const taskId = typeof hash === "string" && hash.startsWith("#") ? hash.slice(1) : "";
+    return workspaceTaskPanels.some((panel) => panel.id === taskId) ? taskId : "connection-overview";
+  }
+
+  function selectWorkspaceTask(taskId, updateHash) {
+    if (!(workspaceTaskNavigation instanceof HTMLElement)) return;
+    const selectedTaskId = workspaceTaskIdFromHash("#" + taskId);
+    const tabs = [...workspaceTaskNavigation.querySelectorAll("a[data-workspace-task]")];
+    workspaceTaskPanels.forEach((panel) => {
+      panel.hidden = panel.id !== selectedTaskId;
+    });
+    tabs.forEach((tab) => {
+      const selected = tab.getAttribute("data-workspace-task") === selectedTaskId;
+      tab.setAttribute("aria-selected", String(selected));
+      tab.setAttribute("tabindex", selected ? "0" : "-1");
+    });
+    if (updateHash === true && typeof history !== "undefined") {
+      history.replaceState(null, "", "#" + selectedTaskId);
+    }
+  }
+
+  function initializeWorkspaceTaskNavigation() {
+    if (!(workspaceTaskNavigation instanceof HTMLElement) || typeof window === "undefined") return;
+    const tabs = [...workspaceTaskNavigation.querySelectorAll("a[data-workspace-task]")];
+    tabs.forEach((tab, index) => {
+      tab.addEventListener("click", (event) => {
+        event.preventDefault();
+        selectWorkspaceTask(String(tab.getAttribute("data-workspace-task") || ""), true);
+      });
+      tab.addEventListener("keydown", (event) => {
+        let targetIndex;
+        if (event.key === "ArrowRight") targetIndex = (index + 1) % tabs.length;
+        if (event.key === "ArrowLeft") targetIndex = (index - 1 + tabs.length) % tabs.length;
+        if (event.key === "Home") targetIndex = 0;
+        if (event.key === "End") targetIndex = tabs.length - 1;
+        if (targetIndex === undefined) return;
+        event.preventDefault();
+        const target = tabs[targetIndex];
+        if (!(target instanceof HTMLElement)) return;
+        selectWorkspaceTask(String(target.getAttribute("data-workspace-task") || ""), true);
+        target.focus();
+      });
+    });
+    window.addEventListener("hashchange", () => {
+      selectWorkspaceTask(workspaceTaskIdFromHash(window.location.hash), false);
+    });
+    selectWorkspaceTask(workspaceTaskIdFromHash(window.location.hash), false);
+  }
+
   function staleAuthenticationRequestError() {
     const error = new Error("This response belongs to an earlier Console session.");
     error.name = staleAuthenticationRequestName;
@@ -2088,6 +2152,9 @@ const script = `(() => {
     hideSetupWizardPaths();
     if (setupWizardView) setupWizardView.hidden = true;
     if (workspaceView) workspaceView.hidden = false;
+    if (typeof window !== "undefined") {
+      selectWorkspaceTask(workspaceTaskIdFromHash(window.location.hash), false);
+    }
     if (setupDraftActions) setupDraftActions.hidden = false;
     renderProviderAuthentication(metadata.authentication);
     const configName = byId("config-name");
@@ -2888,6 +2955,7 @@ const script = `(() => {
     refreshButton.addEventListener("click", () => void refresh().catch((error) => message(errorMessage(error))));
   }
   if (typeof window !== "undefined") {
+    initializeWorkspaceTaskNavigation();
     window.addEventListener("pageshow", (event) => {
       if (event.persisted) void resumeSession();
     });
diff --git a/tests/console-server.test.ts b/tests/console-server.test.ts
index 7b5c435..c242e5f 100644
--- a/tests/console-server.test.ts
+++ b/tests/console-server.test.ts
@@ -131,6 +131,133 @@ async function bootstrapSession(server: Awaited<ReturnType<typeof startConsoleSe
   return { cookie, csrfToken: body.data.csrfToken };
 }
 
+function exerciseWorkspaceTaskNavigation(javascript: string, initialHash = ""): {
+  readonly selected: () => string;
+  readonly tabState: () => readonly {
+    readonly taskId: string;
+    readonly ariaSelected: string | null;
+    readonly tabindex: string | null;
+  }[];
+  readonly draftValue: () => string;
+  readonly focused: () => string;
+  readonly hash: () => string;
+  readonly click: (taskId: string) => void;
+  readonly keydown: (taskId: string, key: string) => void;
+  readonly restore: (hash: string) => void;
+} {
+  type Listener = (event: { readonly key?: string; readonly preventDefault: () => void }) => void;
+
+  class FakeElement {
+    readonly listeners = new Map<string, Listener>();
+    readonly attributes = new Map<string, string>();
+    readonly children: FakeElement[] = [];
+    hidden = false;
+    draft = "";
+
+    constructor(readonly id: string) {}
+
+    addEventListener(name: string, listener: Listener): void {
+      this.listeners.set(name, listener);
+    }
+
+    getAttribute(name: string): string | null {
+      return this.attributes.get(name) ?? null;
+    }
+
+    setAttribute(name: string, value: string): void {
+      this.attributes.set(name, value);
+    }
+
+    querySelectorAll(): FakeElement[] {
+      return this.children;
+    }
+
+    focus(): void {
+      focused = this.id;
+    }
+  }
+
+  const taskIds = [
+    "connection-overview",
+    "connection-accounts",
+    "connection-authentication",
+    "connection-client-setup",
+    "connection-audit"
+  ];
+  const navigation = new FakeElement("workspace-task-navigation");
+  const panels = taskIds.map((id) => new FakeElement(id));
+  const tabs = taskIds.map((id) => {
+    const tab = new FakeElement(`workspace-task-${id.slice("connection-".length)}`);
+    tab.setAttribute("data-workspace-task", id);
+    navigation.children.push(tab);
+    return tab;
+  });
+  panels[1]!.draft = "production";
+  let focused = "";
+  const windowListeners = new Map<string, () => void>();
+  const browserWindow = {
+    location: { hash: initialHash },
+    addEventListener(name: string, listener: () => void): void {
+      windowListeners.set(name, listener);
+    }
+  };
+  const browserHistory = {
+    replaceState(_state: null, _title: string, hash: string): void {
+      browserWindow.location.hash = hash;
+    }
+  };
+  const result: Record<string, unknown> = {};
+  const start = javascript.indexOf("  function workspaceTaskIdFromHash");
+  const end = javascript.indexOf("\n  function staleAuthenticationRequestError", start);
+  if (start < 0 || end < 0) throw new Error("Expected focused workspace navigation functions.");
+  runInNewContext(
+    `${javascript.slice(start, end)}\n` +
+      "result.selectWorkspaceTask = selectWorkspaceTask;\n" +
+      "result.workspaceTaskIdFromHash = workspaceTaskIdFromHash;\n" +
+      "initializeWorkspaceTaskNavigation();",
+    {
+      workspaceTaskNavigation: navigation,
+      workspaceTaskPanels: panels,
+      HTMLElement: FakeElement,
+      window: browserWindow,
+      history: browserHistory,
+      result
+    }
+  );
+
+  const selectWorkspaceTask = result.selectWorkspaceTask as (taskId: string, updateHash: boolean) => void;
+  const workspaceTaskIdFromHash = result.workspaceTaskIdFromHash as (hash: string) => string;
+  const selected = (): string => panels.find((panel) => !panel.hidden)?.id ?? "";
+  const event = (key?: string): { readonly key?: string; readonly preventDefault: () => void } => ({
+    ...(key === undefined ? {} : { key }),
+    preventDefault: () => undefined
+  });
+
+  return {
+    selected,
+    tabState: () => tabs.map((tab) => ({
+      taskId: tab.getAttribute("data-workspace-task") ?? "",
+      ariaSelected: tab.getAttribute("aria-selected"),
+      tabindex: tab.getAttribute("tabindex")
+    })),
+    draftValue: () => panels[1]!.draft,
+    focused: () => focused,
+    hash: () => browserWindow.location.hash,
+    click(taskId: string): void {
+      const tab = tabs[taskIds.indexOf(taskId)];
+      tab?.listeners.get("click")?.(event());
+    },
+    keydown(taskId: string, key: string): void {
+      const tab = tabs[taskIds.indexOf(taskId)];
+      tab?.listeners.get("keydown")?.(event(key));
+    },
+    restore(hash: string): void {
+      browserWindow.location.hash = hash;
+      selectWorkspaceTask(workspaceTaskIdFromHash(hash), false);
+    }
+  };
+}
+
 async function submitPresetFormWithStaleValue(
   javascript: string,
   suppliedValues?: Readonly<Record<string, string>>
@@ -1482,12 +1609,15 @@ function exerciseSessionResumeLifecycle(javascript: string): {
   readonly callsAfterStartup: number;
   readonly callsAfterNormalPageShow: number;
   readonly callsAfterPersistedPageShow: number;
+  readonly navigationCallsAfterStartup: number;
+  readonly navigationCallsAfterPersistedPageShow: number;
 } {
   const start = javascript.lastIndexOf('if (typeof window !== "undefined")');
   const end = javascript.indexOf("\n})();", start);
   if (start < 0 || end < 0) throw new Error("Expected the Console session-resume startup block.");
 
   let resumeCalls = 0;
+  let navigationCalls = 0;
   let pageShow: ((event: { readonly persisted: boolean }) => void) | undefined;
   runInNewContext(javascript.slice(start, end), {
     window: {
@@ -1497,16 +1627,22 @@ function exerciseSessionResumeLifecycle(javascript: string): {
     },
     resumeSession(): void {
       resumeCalls += 1;
+    },
+    initializeWorkspaceTaskNavigation(): void {
+      navigationCalls += 1;
     }
   });
   const callsAfterStartup = resumeCalls;
+  const navigationCallsAfterStartup = navigationCalls;
   pageShow?.({ persisted: false });
   const callsAfterNormalPageShow = resumeCalls;
   pageShow?.({ persisted: true });
   return {
     callsAfterStartup,
     callsAfterNormalPageShow,
-    callsAfterPersistedPageShow: resumeCalls
+    callsAfterPersistedPageShow: resumeCalls,
+    navigationCallsAfterStartup,
+    navigationCallsAfterPersistedPageShow: navigationCalls
   };
 }
 
@@ -2513,17 +2649,39 @@ describe("local Console control server", () => {
       const page = await fetch(server.url);
       expect(page.status).toBe(200);
       const html = await page.text();
-      expect(html).toContain('<nav id="workspace-task-navigation" aria-label="Connection tasks">');
-      expect(html).toContain('href="#connection-overview">Overview</a>');
-      expect(html).toContain('href="#connection-accounts">Accounts</a>');
-      expect(html).toContain('href="#connection-authentication">Authentication</a>');
-      expect(html).toContain('href="#connection-client-setup">Client setup</a>');
-      expect(html).toContain('href="#connection-audit">Audit</a>');
-      expect(html).toContain('id="connection-overview"');
-      expect(html).toContain('id="connection-accounts"');
-      expect(html).toContain('id="connection-authentication"');
-      expect(html).toContain('id="connection-client-setup"');
-      expect(html).toContain('id="connection-audit"');
+      expect(html).toContain(
+        '<nav id="workspace-task-navigation" aria-label="Connection tasks" role="tablist">'
+      );
+      expect(html).toContain(
+        'id="workspace-task-overview" href="#connection-overview" role="tab" aria-controls="connection-overview" aria-selected="true" tabindex="0" data-workspace-task="connection-overview">Overview</a>'
+      );
+      expect(html).toContain(
+        'id="workspace-task-accounts" href="#connection-accounts" role="tab" aria-controls="connection-accounts" aria-selected="false" tabindex="-1" data-workspace-task="connection-accounts">Accounts</a>'
+      );
+      expect(html).toContain(
+        'id="workspace-task-authentication" href="#connection-authentication" role="tab" aria-controls="connection-authentication" aria-selected="false" tabindex="-1" data-workspace-task="connection-authentication">Authentication</a>'
+      );
+      expect(html).toContain(
+        'id="workspace-task-client-setup" href="#connection-client-setup" role="tab" aria-controls="connection-client-setup" aria-selected="false" tabindex="-1" data-workspace-task="connection-client-setup">Client setup</a>'
+      );
+      expect(html).toContain(
+        'id="workspace-task-audit" href="#connection-audit" role="tab" aria-controls="connection-audit" aria-selected="false" tabindex="-1" data-workspace-task="connection-audit">Audit</a>'
+      );
+      expect(html).toContain(
+        'id="connection-overview" class="workspace-task-panel" role="tabpanel" aria-labelledby="workspace-task-overview" tabindex="0"'
+      );
+      expect(html).toContain(
+        'id="connection-accounts" class="workspace-task-panel" role="tabpanel" aria-labelledby="workspace-task-accounts" tabindex="0" hidden'
+      );
+      expect(html).toContain(
+        'id="connection-authentication" class="workspace-task-panel" role="tabpanel" aria-labelledby="workspace-task-authentication" tabindex="0" hidden'
+      );
+      expect(html).toContain(
+        'id="connection-client-setup" class="workspace-task-panel work-section split" role="tabpanel" aria-labelledby="workspace-task-client-setup" tabindex="0" hidden'
+      );
+      expect(html).toContain(
+        'id="connection-audit" class="workspace-task-panel work-section" role="tabpanel" aria-labelledby="workspace-task-audit" tabindex="0" hidden'
+      );
 
       const accounts = html.slice(
         html.indexOf('id="connection-accounts"'),
@@ -2531,6 +2689,88 @@ describe("local Console control server", () => {
       );
       expect(accounts).toContain('id="confirm-profile-removal"');
       expect(accounts).toContain('id="remove-profile"');
+
+      const script = await fetch(new URL("/app.js", server.url));
+      expect(script.status).toBe(200);
+      const javascript = await script.text();
+      expect(javascript).toContain("function initializeWorkspaceTaskNavigation()");
+      expect(javascript).toContain('panel.hidden = panel.id !== selectedTaskId');
+      expect(javascript).toContain('tab.setAttribute("aria-selected", String(selected))');
+      expect(javascript).toContain('event.key === "ArrowRight"');
+      expect(javascript).toContain('event.key === "ArrowLeft"');
+      expect(javascript).toContain('event.key === "Home"');
+      expect(javascript).toContain('event.key === "End"');
+      expect(javascript).toContain('history.replaceState(null, "", "#" + selectedTaskId)');
+      expect(javascript).toContain("workspaceTaskIdFromHash(window.location.hash)");
+    } finally {
+      await server.close();
+    }
+  });
+
+  it("keeps one workspace task active across keyboard changes, refresh, and reauthentication", async () => {
+    const server = await startConsoleServer(await writeConfig(), {
+      bootstrapCredential: "test-only-bootstrap-credential"
+    });
+
+    try {
+      const script = await fetch(new URL("/app.js", server.url));
+      expect(script.status).toBe(200);
+      const javascript = await script.text();
+      const navigation = exerciseWorkspaceTaskNavigation(javascript);
+      const expectOneActiveTab = (taskId: string): void => {
+        const tabState = navigation.tabState();
+        expect(tabState.filter((tab) => tab.ariaSelected === "true")).toEqual([
+          expect.objectContaining({ taskId, tabindex: "0" })
+        ]);
+        expect(tabState.filter((tab) => tab.tabindex === "0")).toEqual([
+          expect.objectContaining({ taskId, ariaSelected: "true" })
+        ]);
+      };
+
+      expect(navigation.selected()).toBe("connection-overview");
+      expectOneActiveTab("connection-overview");
+      navigation.click("connection-accounts");
+      expect(navigation.selected()).toBe("connection-accounts");
+      expectOneActiveTab("connection-accounts");
+      expect(navigation.draftValue()).toBe("production");
+      expect(navigation.hash()).toBe("#connection-accounts");
+
+      navigation.keydown("connection-accounts", "ArrowRight");
+      expect(navigation.selected()).toBe("connection-authentication");
+      expectOneActiveTab("connection-authentication");
+      expect(navigation.focused()).toBe("workspace-task-authentication");
+      expect(navigation.draftValue()).toBe("production");
+
+      navigation.keydown("connection-authentication", "ArrowLeft");
+      expect(navigation.selected()).toBe("connection-accounts");
+      expectOneActiveTab("connection-accounts");
+      expect(navigation.focused()).toBe("workspace-task-accounts");
+
+      navigation.keydown("connection-accounts", "End");
+      expect(navigation.selected()).toBe("connection-audit");
+      expectOneActiveTab("connection-audit");
+      navigation.keydown("connection-audit", "Home");
+      expect(navigation.selected()).toBe("connection-overview");
+      expectOneActiveTab("connection-overview");
+
+      navigation.restore("#connection-client-setup");
+      expect(navigation.selected()).toBe("connection-client-setup");
+      expectOneActiveTab("connection-client-setup");
+      expect(navigation.draftValue()).toBe("production");
+
+      const restoredNavigation = exerciseWorkspaceTaskNavigation(javascript, "#connection-audit");
+      expect(restoredNavigation.selected()).toBe("connection-audit");
+      expect(restoredNavigation.tabState().filter((tab) => tab.ariaSelected === "true")).toEqual([
+        expect.objectContaining({ taskId: "connection-audit", tabindex: "0" })
+      ]);
+      expect(restoredNavigation.tabState().filter((tab) => tab.tabindex === "0")).toHaveLength(1);
+
+      const staleNavigation = exerciseWorkspaceTaskNavigation(javascript, "#stale-session-state");
+      expect(staleNavigation.selected()).toBe("connection-overview");
+      expect(staleNavigation.tabState().filter((tab) => tab.ariaSelected === "true")).toEqual([
+        expect.objectContaining({ taskId: "connection-overview", tabindex: "0" })
+      ]);
+      expect(staleNavigation.tabState().filter((tab) => tab.tabindex === "0")).toHaveLength(1);
     } finally {
       await server.close();
     }
@@ -2907,7 +3147,9 @@ describe("local Console control server", () => {
       expect(exerciseSessionResumeLifecycle(javascript)).toEqual({
         callsAfterStartup: 1,
         callsAfterNormalPageShow: 1,
-        callsAfterPersistedPageShow: 2
+        callsAfterPersistedPageShow: 2,
+        navigationCallsAfterStartup: 1,
+        navigationCallsAfterPersistedPageShow: 1
       });
       expect(bootstrapResponseErrorMessage(
         javascript,