# Acceptance criteria — draft

## Explicit requirement
A user can reset their password using an email link.

## Proposed checks to confirm
- A valid link opens the reset flow.
- An expired link explains the next step.
- A completed reset has a confirmation state.

Expiry duration and confirmation wording are not supplied requirements.