Request Code

Always {sent: true, verification_id, email_masked} for a valid work email, whether or not an account exists. A limit only UNKNOWN addresses meet answers the same way, sends nothing and records a withheld row that the 10-minute per-inbox and per-session caps count, so both kinds see the same sequence (#478 M1, follow-up 3). Enumeration is reduced, not closed: a prober can still tell a known address by counting a per-source budget with inboxes of its own, at the cost of ONE email to it (which the target sees), and the daily cap tells after 10 emails to it; see the service module docstring. The email goes out in the background so the answer time does not depend on Resend.