These are really good questions, but it should not matter how far they were with the attestation and it seems to me, referral is picked after they have made the successfully attested, at the same time when they got the reward.
I was thinking about those unconfirmed bytes too, but I don't understand that part of the code.