Account-access requirements
- The secure access token is single-use and time-limited.
- The connected .edu address is locked for account creation.
- Email verification must finish before activation.
- Terms and Privacy acceptance is required.
- Expired links release the seat for the next eligible waitlist entry.
- Invalid or expired links fail safely without revealing waitlist status.
