How it works
A one-time code needs an expiry and attempt limits, and should not be requested back through untrusted channels. Automated calls and verification flows start from events, rules or schedules. The system records their outcomes to determine subsequent actions.
Business example
A service requests a one-time code before allowing a sensitive account change.
What to consider
Define retry limits, appropriate contact hours and no-answer handling. Check recipient-consent rules and protect one-time verification codes.