1.0.0-rc.1 · Release Candidate1 min read
AutoCore User Review and Account Lifecycle
User statuses, verification boundaries, suspension/deactivation behavior, activity, and privacy-safe review.
Verified account statuses are pending_verification, active, suspended, banned, and deleted. The current Admin selector exposes active, suspended, and banned; it does not expose every database value as an operator action.
| Area | Source-verified boundary |
|---|---|
| Review | Check identifier, status, email-verification flag, roles, memberships, counts, sessions, and activity. |
| Suspension/deactivation | Use the guarded status endpoint with an operator reason and verify the resulting status. |
| Privacy | Use <USER_ID> and [email protected] in examples; never publish real records. |
| Unsupported claims | The reviewed console does not prove impersonation, bulk editing, password reset, or account deletion controls. |
High-risk operation
Use the required permission, reason, confirmation, and post-action verification. UI visibility is not the authorization boundary.
Verification
Verify the route, permission, response state, audit outcome, and public effect before closing the task. Record unknown or configuration-dependent behavior as a limitation.