fix(osi): 加固 Phase 0 验收实现（T-006）

main_test.go

@@ -19,3 +19,24 @@ func TestParseModeRejectsUnknownMode(t *testing.T) {
 		t.Fatal("parseMode accepted unknown mode")
 	}
 }
+
+func TestResolveVerifyIDCardReadsEnvironment(t *testing.T) {
+	got, err := resolveVerifyIDCard(true, func(key string) string {
+		if key == "OSI_VERIFY_ID_CARD" {
+			return "440100199001011234"
+		}
+		return ""
+	})
+	if err != nil {
+		t.Fatalf("resolveVerifyIDCard: %v", err)
+	}
+	if got != "440100199001011234" {
+		t.Fatalf("idCard = %q", got)
+	}
+}
+
+func TestResolveVerifyIDCardRequiresEnvironment(t *testing.T) {
+	if _, err := resolveVerifyIDCard(true, func(string) string { return "" }); err == nil {
+		t.Fatal("resolveVerifyIDCard accepted missing OSI_VERIFY_ID_CARD")
+	}
+}