Node.js marketplace password reset email system uses five-state workflow for audit compliance

A Node.js marketplace service should treat password reset emails as a five-state workflow: requested, eligible, submitted, observed, and suppressed. The system makes eligibility decisions from versioned suppression snapshots and renders immutable branded templates before enqueuing sends. This approach provides defensible audit trails for account recovery scenarios where delivery is uncertain. The method requires more engineering effort than simple email client calls but ensures reproducible decisions and proper retry logic. The five-state model distinguishes between business logic states and transport provider events to maintain historical evidence stability.