diff --git a/README.md b/README.md
index 17c3908..c096425 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,9 @@
 # GovOPlaN Identity
 
+<!-- govoplan-repository-type:start -->
+**Repository type:** module (platform).
+<!-- govoplan-repository-type:end -->
+
 `govoplan-identity` is the canonical identity directory module for GovOPlaN.
 
 It owns identities and links between identities and platform accounts. This is
diff --git a/pyproject.toml b/pyproject.toml
index b803adc..6c5020d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,13 +4,13 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "govoplan-identity"
-version = "0.1.7"
+version = "0.1.8"
 description = "GovOPlaN identity directory module."
 readme = "README.md"
 requires-python = ">=3.12"
 authors = [{ name = "GovOPlaN" }]
 dependencies = [
-  "govoplan-core>=0.1.7",
+  "govoplan-core>=0.1.8",
 ]
 
 [tool.setuptools.packages.find]
diff --git a/src/govoplan_identity/backend/manifest.py b/src/govoplan_identity/backend/manifest.py
index 01926b8..934413a 100644
--- a/src/govoplan_identity/backend/manifest.py
+++ b/src/govoplan_identity/backend/manifest.py
@@ -55,7 +55,7 @@ def _identity_directory(context: ModuleContext) -> object:
 manifest = ModuleManifest(
     id="identity",
     name="Identity",
-    version="0.1.7",
+    version="0.1.8",
     required_capabilities=(CAPABILITY_AUTH_PRINCIPAL_RESOLVER, CAPABILITY_AUTH_PERMISSION_EVALUATOR),
     permissions=PERMISSIONS,
     role_templates=ROLE_TEMPLATES,
diff --git a/src/govoplan_identity/backend/migrations/versions/5c6d7e8f9a10_identity_directory.py b/src/govoplan_identity/backend/migrations/dev_versions/5c6d7e8f9a10_identity_directory.py
similarity index 100%
rename from src/govoplan_identity/backend/migrations/versions/5c6d7e8f9a10_identity_directory.py
rename to src/govoplan_identity/backend/migrations/dev_versions/5c6d7e8f9a10_identity_directory.py
diff --git a/src/govoplan_identity/backend/migrations/dev_versions/__init__.py b/src/govoplan_identity/backend/migrations/dev_versions/__init__.py
new file mode 100644
index 0000000..a5398f3
--- /dev/null
+++ b/src/govoplan_identity/backend/migrations/dev_versions/__init__.py
@@ -0,0 +1 @@
+"""Identity module migration versions."""
diff --git a/src/govoplan_identity/backend/migrations/versions/5c6d7e8f9a10_v017_identity_baseline.py b/src/govoplan_identity/backend/migrations/versions/5c6d7e8f9a10_v017_identity_baseline.py
new file mode 100644
index 0000000..ce65019
--- /dev/null
+++ b/src/govoplan_identity/backend/migrations/versions/5c6d7e8f9a10_v017_identity_baseline.py
@@ -0,0 +1,52 @@
+"""v0.1.7 identity baseline
+
+Revision ID: 5c6d7e8f9a10
+Revises: None
+Create Date: 2026-07-11 00:00:00.000000
+"""
+from __future__ import annotations
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = '5c6d7e8f9a10'
+down_revision = None
+branch_labels = None
+depends_on = ('4f2a9c8e7b6d', '4a5b6c7d8e9f')
+
+
+def upgrade() -> None:
+    op.create_table('identity_identities',
+    sa.Column('id', sa.String(length=36), nullable=False),
+    sa.Column('display_name', sa.String(length=255), nullable=True),
+    sa.Column('external_subject', sa.String(length=255), nullable=True),
+    sa.Column('source', sa.String(length=50), nullable=False),
+    sa.Column('is_active', sa.Boolean(), nullable=False),
+    sa.Column('settings', sa.JSON(), nullable=False),
+    sa.Column('created_at', sa.DateTime(timezone=True), nullable=False),
+    sa.Column('updated_at', sa.DateTime(timezone=True), nullable=False),
+    sa.PrimaryKeyConstraint('id', name=op.f('pk_identity_identities'))
+    )
+    op.create_index(op.f('ix_identity_identities_external_subject'), 'identity_identities', ['external_subject'], unique=False)
+    op.create_table('identity_account_links',
+    sa.Column('id', sa.String(length=36), nullable=False),
+    sa.Column('identity_id', sa.String(length=36), nullable=False),
+    sa.Column('account_id', sa.String(length=36), nullable=False),
+    sa.Column('is_primary', sa.Boolean(), nullable=False),
+    sa.Column('source', sa.String(length=50), nullable=False),
+    sa.Column('created_at', sa.DateTime(timezone=True), nullable=False),
+    sa.Column('updated_at', sa.DateTime(timezone=True), nullable=False),
+    sa.ForeignKeyConstraint(['identity_id'], ['identity_identities.id'], name=op.f('fk_identity_account_links_identity_id_identity_identities'), ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id', name=op.f('pk_identity_account_links')),
+    sa.UniqueConstraint('identity_id', 'account_id', name='uq_identity_module_account_links_identity_account')
+    )
+    op.create_index(op.f('ix_identity_account_links_account_id'), 'identity_account_links', ['account_id'], unique=False)
+    op.create_index(op.f('ix_identity_account_links_identity_id'), 'identity_account_links', ['identity_id'], unique=False)
+    op.create_index('uq_identity_module_account_links_primary_account', 'identity_account_links', ['account_id'], unique=True, sqlite_where=sa.text('is_primary = 1'), postgresql_where=sa.text('is_primary IS TRUE'))
+    op.create_index('uq_identity_module_account_links_primary_identity', 'identity_account_links', ['identity_id'], unique=True, sqlite_where=sa.text('is_primary = 1'), postgresql_where=sa.text('is_primary IS TRUE'))
+
+
+def downgrade() -> None:
+    op.drop_table('identity_account_links')
+    op.drop_table('identity_identities')