Recommended sequence
- Validate the signup payload in your backend.
- Call
POST /v1/checkwith the normalized email. - Check both the HTTP status and response
status. - Enforce
recommended_action. - Create the account only after an allowed decision.
- Store
request_id,policy_version, and the action in your audit event.