Eligible
class Eligible(val reset: RecoveryKeyResetStatus.Pending, val evaluatedAt: Instant) : RecoveryKeyResetAwareness
reset is pending and, by the client clock at evaluatedAt, old enough to be completed (evaluatedAt>= RecoveryKeyResetStatus.Pending.eligibleAt). Only that: the server decides eligibility with its own clock, so a completion can still be refused (NOT_YET_ELIGIBLE), and nobody has approved anything.