Confirmed requests clicked the 72-hour email link and are ready for the access-link step (designed in a later phase) · pending requests have not confirmed their email yet. Aadhaar is shown masked; the full number is stored encrypted.