Role delay using Rules
Step 1

Create a Rule Component to "Grant a user the Trusted authenticated user permission" (whereas the user is specified as a parameter for this Rules Component).

Step 2

Enable the rules scheduler (a sub-module of the Rules module).

Step 3

Adapt the rule you seem to have in place already for that "movement from 1) to 2)" (or create a new rule that catches that as a Rules Event): at the end of this rule, add another Rules Action to schedule the execution of the Rules Component in Step1, after 24 hours.

Optionally you may also want to add some extra Rules Conditions that the user does not have rule "3)" yet (or any other Rules Condition that may fit).

Step 4

Next time your cron job runs, the permission "Trusted authenticated user" will get granted.

PS: I'm assuming this question is about D7.