v6.30.0

Added

• A Name the Accounts Created Without One migration card, for the accounts already created that way. It reads the name from the candidacy's own plain column, or from a submission's answers, and touches only an account whose display name is still its login and whose first name is empty — those two are written together, so one without the other means something else changed it. It keeps a cursor rather than re-measuring, because an account whose records name nobody stays in the pending set forever and would otherwise be re-read on every batch (#1480)

Fixed

• Identity resolution: a merge or relink refused because one side carries two values for an identifier no longer reports it as the two sides holding different values. They often hold the same one — it is what paired them in the queue — and the old sentence sent operators to compare two identical numbers. The refusal now names the account and how many values it holds, and the search column gets its own badge for it (#1477)
• Identity resolution: correcting a mistyped RF or CPF is no longer refused as a "merge" when the right value already belongs to another account. It is not a merge — no record moves and no account is absorbed — so it is allowed once the operator acknowledges it, and the two accounts then appear under "Two accounts, one number" where the merge is decided. The refusal had deadlocked pairs where the merge in turn needed one value per account (#1478)
• Identity resolution: where a finding's records carry an address of their own, the split now fills it in and shows the names on those records, instead of asking an operator to type an address they can already see. The test is identifier plus address — two discordant elements, both hashed; the name is evidence for the confirmation, never a condition, since two people share a name and one person's is spelled two ways (#1480)
• One list decides which answer key holds a person's name. It had been written at five sites and two of them were missing participante, including the one that sets display_name — so a form keyed that way had its name shown on every admin screen while the account created from it got none (#1480)
• Promoting a recruitment candidate now carries the person's name onto the account it creates. It passed an empty answers array — three lines below the name it had just read off the row it was persisting — so WordPress fell back to storing the login as the display name. Measured on production: 6,977 accounts show their login instead of their name, and 6,976 of them were promoted from a candidacy (#1480)

Changed

• The identity audit CSV now prints 12 characters of an identifier hash instead of 16, matching every screen and log. An operator holding the file beside the queue can now match a row to a panel by eye, and the exported file no longer carries more of a hash than the screens do (#1477)