Summary #
Adds bagend identity <did> to inspect public did:plc and did:web identity data, including PLC rotation keys.
You can optionally state that you have recovery access with --recovery-access-attested. Bagend labels that statement as unverified. A listed public key still does not prove you hold its private key.
The command supports text and JSON output, keeps no account state, and leaves backup checks and signing proof for later.
Testing #
Tests, race detection, vet, lint, build, and ran against my personal account (justin.randoneering.dev)