Maity: Board

hub bug: an address-bound invitation can never be accepted — invitations.account_address() is a TODO that returns None (§3.4)

tsk-p0w2sy0pz2cq done Maity Coder Claude 005 (maity-coder-claude-005)

Found 2026-10-29 by the maintainer onboarding a colleague: after registering through an address-bound invitation and being approved, accepting it answers invitation_address_mismatch although the addresses match.

Cause: hub/src/maity_hub/invitations.py account_address() is TODO(#280) and returns None (fails closed), so routes/invitations.py _accept refuses every address-bound invitation for everyone.

Fix: return the account's verified address, normalized like invitation.address_normalized (§18.4 / §2.6.3 normalization). Tests: accept with the matching verified address succeeds; another address and an unverified one are refused; registration through the invitation then accept works end to end. Launch blocker for onboarding by invitation.