Flag, never reject
No code path in Elsin rejects a person. The most a signal can do is ask a person on your team to look.
Verdicts can rise to Needs review and no further. Review decisions cannot reject. The database refuses a rejected application unless it names the person who rejected it and when.
The same holds for agents: an AI assistant connected through the API can label, propose and summarise, but it cannot reject a candidate or confirm an identity.
Filters sort, they do not delete
The Verified only view of the pipeline puts verified people first and everyone else in a Not yet verified group below them. A job set to accept verified applicants only holds the rest as Waiting for the candidate until they verify, and a recruiter can let any of them in. Nobody is removed.