# Registration approval flow

New registrations are recorded as `pending_email_verification`. A signed email-verification link moves the account to `pending_admin_approval`.

Administrators review pending registrations oldest first from **Registrations**. They may approve an account, which records the reviewer and approval timestamp, or reject it with a required reason, reviewer, and rejection timestamp. Each outcome sends an email after the database transition commits.

Only approved accounts can log in. Rejected applicants receive a seven-day signed link to edit their existing record and resubmit it. The verified email and referral relationship are preserved; resubmission clears current rejection fields and returns the account to pending admin approval. Rejection history and first-login onboarding remain deferred.
