Id Verify

The read-only infra-delivery POST-MERGE seam (step 14) — the PROCEDURE the generic agent runs AFTER a change is realized (applied / ArgoCD-reconciled) to prove it LANDED and is STABLE, entirely read-only. Resolves the active profile, drives the profile''s infra_binding.verify through the CTX guard (read-only — no mutating verb), and RECORDS the post-merge observations as a `.foundry/`-partitioned step-report note. The empty-plan re-check (tofu plan == ∅ + coverage>0) is the headline observation — the skill does NOT self-certify (the id-plan invariant), and honest disclosure: the bespoke `emit_infra_walk_evidence`/`derive_infra_walk_verdict` recorder + verdict machinery this skill used to name as its backend/adjudicator were retired and do not exist in scripts/. ArgoCD synced+healthy + deployed-artifact identity are RECORDED as ADVISORY post-merge observations (surfaced in the report; deferred to the post-deploy realization frame). The read-only counterpart of id-plan on the realize side. ADVISORY craft + read-only against the env; surfaces, never auto-fixes; does NOT gate, approve, or merge — the merge floor (branch protection + CI checks, see docs/merge-floor.md) is the authority.

mkdir -p ~/.claude/skills/id-verify
curl -L https://claudskills.com/skills/id-verify/SKILL.md \
  -o ~/.claude/skills/id-verify/SKILL.md

@misc{id-verify-2026,
  author    = {lukasrepublic},
  title     = {Id Verify [Claude Code skill]},
  year      = {2026},
  publisher = {ClaudSkills},
  url       = {https://claudskills.com/skills/id-verify/}
}