When the user setting
Verify email addresses? is enabled, and the user's email is reset by a non-admin the address requires verification before being used as explained here. This does not seem to show any sort of confirmation anywhere that the email reset has been made until the user verifies it. The account seems to stay live also, so checking pending users does not help.
Is there an attribute or function I can call to find out if the email is verified?