SAMPLE EVIDENCE for AU-01 (made-up app Tidyhaus; not a real review) Second use of the reset link (screenshot described): 'This link has expired or was already used'. Email link expiry setting: 3600 seconds.