Why: runIdentity lived in cmd/agent-system package main, so downstream
combination binaries (Agent-System-RDM) cannot reuse it and their unknown
subcommands fall into the serve path; the 2026-10-12 rdm1/rdmcand batch
update failures traced back to that capability gap.
Evidence: go test ./pkg/identity/... ok; CGO_ENABLED=0 go build ok;
behavioral probes (usage rc=2, capabilities v1, ensure/verify roundtrip)
recorded in the PR.
Impact: identity semantics unchanged for the base binary; adds
identity capabilities (v1) and usage-on-unknown contract shared by all
products; no storage changes.
Refs: Dev PR #474 (svc.sh candidate gate); user root-cause report
2026-10-12 U1 (shared identity interface).
weichen
merged commit acabb85e2a into main2026-10-12 13:11:27 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Why/Evidence/Impact/Refs 见提交 5623000。Dev 侧 PR #474 已建立候选身份门禁；本 PR 提供其依赖的跨产物 identity 公共实现（ensure/verify/capabilities v1；未知子命令 usage 退出、不落服务路径）。行为验证：usage rc=2；capabilities 输出 identity-capabilities: v1 ensure,verify；ensure/verify SQLite 往返 rc=0/0，错 id rc=1。单测 go test ./pkg/identity/... ok；CGO_ENABLED=0 go build ok。