Reset Email Operations — Auditing Token Expiry, Single Use, and Database Evidence

To build a secure password reset email flow, make every committed state transition provable before a report deadline creates an emergency. The page fires when requests stop reaching a terminal state. On-call sees 31 open recoveries for B2B SaaS administrators who are trying to download generated compliance reports, the oldest already 18 minutes old, but no raw email addresses and no reset links in the alert. TL;DR: build the flow as an auditable sequence of committed transitions: accept an indistinguishable public request, create a short-lived random secret, store only its SHA-256 digest, hand