Aggregate'ler

public class User : Entity, IAggregateRoot
{
    public long ReferenceNumber { get; protected set; }
    public FullName? FullName { get; private set; }
    public Phone?    Phone    { get; private set; }
    public Email?    Email    { get; private set; }

    public bool IsPhoneNumberVerified { get; private set; }
    public bool IsEmailVerified       { get; private set; }

    public TotpConfigurationInfo? Totp { get; private set; }
    public virtual int StatusId { get; private set; }
    public virtual UserStatus Status => UserStatus.FromValue<UserStatus>(StatusId);

    public int TokenVersion { get; private set; } = 1; // RBAC token invalidation

    public virtual ICollection<UserSession> Sessions { get; private set; } = new HashSet<UserSession>();
    public virtual ICollection<UserOtpChallenge> OtpChallenges { get; private set; } = new HashSet<UserOtpChallenge>();
    public virtual ICollection<UserIdentityProvider> IdentityProviders { get; private set; } = new HashSet<UserIdentityProvider>();
    public virtual ICollection<UserRole> UserRoles { get; private set; } = new HashSet<UserRole>();
    // ...
}

protected User() { }
internal User(FullName? fullName, Phone? phone = null, Email? email = null) : this()
{
    this.Id = GuidFactory.New();

    if (phone == null && email == null)
        throw new DomainException("Kullanıcı kaydı için en az bir telefon ya da e-posta tanımlanmalıdır");

    this.FullName = fullName;
    this.Phone    = phone;
    this.Email    = email;
    this.StatusId = UserStatus.Draft.Id;

    AddDomainEvent(new UserCreatedDomainEvent(Id, fullName, Phone, Email));
}

public class UserStatus : Enumeration
{
    public static UserStatus Draft     = new(0, nameof(Draft));     // kanal henüz doğrulanmadı
    public static UserStatus Active    = new(1, nameof(Active));    // en az bir kanal doğrulandı, login serbest
    public static UserStatus Suspended = new(2, nameof(Suspended)); // kullanıcı kendi dondurdu
    public static UserStatus Banned    = new(3, nameof(Banned));    // admin tamamen engelledi
    public static UserStatus Pending   = new(4, nameof(Pending));   // dış IdP geldi, admin onayı bekliyor
}

public bool CanLogin      => Status == UserStatus.Active;
public bool CanRequestOtp => Status == UserStatus.Draft || Status == UserStatus.Active;
public bool IsBlocked     => Status == UserStatus.Banned || Status == UserStatus.Suspended;

public class Citizen : Entity, IAggregateRoot
{
    public FullName? FullName { get; private set; }
    public CitizenProfileImageInfo? ProfileImage { get; private set; }
    public virtual CitizenStatus Status => CitizenStatus.FromValue<CitizenStatus>(StatusId);
    public virtual ICollection<CitizenSession> Sessions { get; private set; }
    // ... User ile paralel ...
}