moo.sdk.onboarding.default_identity_verifier

moo.sdk.onboarding.default_identity_verifier(identity)

The built-in durable-identity verifier.

Loose by design — accepts any non-empty identity — so it is a working default; deployments point MOO_REGISTRATION_VERIFIER at a stricter one (email round-trip, SSO, etc.).

Warning

This default proves nothing: it normalizes the string but does not confirm the registrant controls the identity. Because a ban blacklists by identity (H), an unverified registration lets one user claim another’s identifier. The (registered_identity, site) uniqueness constraint stops two accounts from holding the same identity, but only a real verifier stops a first false claim. Replace this before exposing @register on any deployment where bans must hold.

Parameters:

identity – the candidate identifier

Returns:

(ok, normalized, error)