How someone gets in — and how someone stops getting in: invitation, open registration with approval, social login across the four providers, anti-robot protection, the three account states and what the public / route shows (and what it deliberately does not).