OptionalMaxThe session's NEW absolute deadline (ISO-8601), present only when verification extended it. The server is authoritative: the janitor enforces this value regardless of what a client does with it. A client uses it only to keep its own abuse guard in step.
How the person proved it: they followed the emailed link, or typed the emailed code.
OptionalRecoveredSet to true ONLY by a client that learned of the verification by reading the session's status
after a reconnect (the live event was missed — delivery has no replay), never by the server.
What a status read cannot carry is then best-effort: VerifiedName is empty and Method is
'link' (the usual way a verification completes while the client is away).
ISO-8601 instant the verification completed (server clock).
The email address the person proved they control, lower-cased and trimmed.
The name the person gave when they asked for verification, as stored (trimmed, length-capped).
Payload of the
identity.verifiedevent.Emitted exactly once per successful verification (link redemption or typed code), after the server has recorded the verification on the session. The session's principal does not change — this event, not a token swap, is how a running session learns the person is verified.