status: "AWAITING_CAPTURE", a verification_session_id, an expires_at value, and a capture_url. Send capture_url to the person being verified. The link is a credential: treat it as secret and do not place it in analytics URLs or logs.
The hosted link uses the deployment’s configured public origin.
