Accept the stdClass user data passed by WordPress and derive the user ID only from the hook object. Cover callback registration, nonce and permission guards, and mismatched posted IDs; refresh the identity review dialog contract. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>