POST /users's field table previously showed phoneNumber and phoneVerifiedAt as optional, with only email/emailVerifiedAt required. Both a verified phone number and a verified email are actually required for every user, regardless of wallet model — the docs were out of date, not the API. POST /users/USERID/kyc-retry's required-field list was brought in line with the same requirement.