Account creation timestamp.
Monotonic version invalidating sessions after credential changes.
Human-readable display name.
Normalized unique login address.
Disabled accounts fail authentication and current-user lookup.
Stable user identifier.
Argon2id credential hash; never leaves the server.
Persisted account preferences; null fields mean not yet chosen.
Last account modification timestamp.
Application identity including the credential hash, never serialized by the HTTP layer.