Connection lifecycle

The Lifecycle

Transitions Explained

Authentication starts verification for a new link; successful checks make it usable and later health checks can degrade or restore it. Credential refusal requires fresh authorization. Pausing retains the account and closing ends it permanently; unfinished links have a guarded discard path.

What Cannot Happen

Final disconnection requires a new account-link record for another setup. Initial activation requires successful verification. Paused accounts are excluded from normal health degradation checks. Fresh authorization must pass verification before use. Periodic checks retain eligible account status rather than putting degraded accounts into first-verification status.

Concurrency and Timing

Named transitions serialize on account rows and retain both audits and binding effects together. Open check requests reuse existing work. Scheduled checks exclude paused accounts; result writes compare the status they observed, and administrator mail follows commit.