Verified session
The email link confirms the session without exposing keys or tokens in the browser.
Registration is immediate, but bidding still requires confirmed email, a protected session and server-side checks for limits, lot state and auction time.
The email link confirms the session without exposing keys or tokens in the browser.
After registration, confirmed email and server checks protect every real bid.
Bids, watched lots and post-award handling use protected APIs with verified identity.
The operational command dry run has passed on a temporary database. Before real bids, login, buyer profile, team role, watched lots, bids and payment handling still need real browser-session rehearsal.