@sdd-method/sdd-cli 1.20.0 → 1.21.0

package/dist/lib/catalogue/aggregate.d.ts

@@ -31,7 +31,31 @@ export interface AggregateResult {
 }
 export type Writer = (s: string) => void;
 export declare function runCatalogueAggregate(inputs: AggregateInputs, write: Writer): Promise<AggregateResult>;
+interface DuplicatePk {
+    readonly catalogue: string;
+    readonly primaryKey: string;
+    readonly value: string;
+    readonly sources: readonly string[];
+}
 export declare function dedupExternalSystems(rowsByCatalogue: Map<string, CatalogueRow[]>, findings: FindingsLog): void;
+/**
+ * M-ADR 0208 §4.4: the catalogues whose organisation-tier key is
+ * `(platform_sdd_id, <pk>)`. Only `domains` — a domain is a bounded context
+ * OF a platform, so the pair is its natural key; every other catalogue's ids
+ * are already platform-qualified by construction or are method-scoped.
+ */
+export declare const PLATFORM_SCOPED_AT_ORGANISATION: readonly string[];
+export declare function findDuplicatePrimaryKeys(schema: CanonicalSchema, rowsByCatalogue: ReadonlyMap<string, readonly CatalogueRow[]>, platformScopedTargets?: readonly string[]): DuplicatePk[];
+/**
+ * M-ADR 0208 §4.4 (F-D), organisation tier. For each platform-scoped
+ * catalogue: which pks are owned by more than one platform, and how many
+ * referencing rows carry such a pk with NO stamp of their own — those
+ * references resolve by scalar fallback (the FK check cannot fail them
+ * without inventing a platform) but they are AMBIGUOUS, and this says so.
+ * One line per scoped catalogue, always written; a coverage finding only
+ * when ambiguity exists. Fires zero on an estate where no id is shared.
+ */
+export declare function checkPlatformScopedKeyAmbiguity(schema: CanonicalSchema, rowsByCatalogue: ReadonlyMap<string, readonly CatalogueRow[]>, platformScopedTargets: readonly string[], findings: FindingsLog, write: (s: string) => void): void;
 /**
  * Stamp `column` = `value` on every row that does not already carry one
  * (preserve-if-set — chained aggregation, M-ADR 0134 §4.5 step 4). Used for
@@ -150,6 +174,22 @@ export interface ContractRekeySummary {
  * guess). Exported for testing.
  */
 export declare function rekeyLegacyContractRefs(schema: CanonicalSchema, rowsByCatalogue: Map<string, CatalogueRow[]>, findings: FindingsLog): ContractRekeySummary;
+/**
+ * Fill `platform_sdd_id` on rows the aggregator constructed after the node
+ * loader stamped its inputs (M-ADR 0208 §4.4). The node loader stamps every
+ * row it MERGES; rows built at this tier from those inputs — 0189 §4.4
+ * adjudication conversions into system_system_dependency / container_dependency,
+ * re-derived edges — set source_sdd_id explicitly and were emitted with an empty
+ * platform stamp under FK PASS (measured: 38 of 38 system_system_dependency rows
+ * and 2 of 208 container_dependency rows on the forward reference estate, the
+ * other 206 stamped by the loader; 26 of 26 and 13 of 194 on the reverse estate's
+ * platform tier). Resolution order per row: the §4.4 fill-rule platform recorded
+ * for its source_sdd_id; else the single stamp already observed on that source's
+ * rows anywhere in the aggregate (a source whose rows carry two different stamps
+ * is ambiguous and is NOT guessed). Whatever remains empty is reported as
+ * coverage — an empty stamp is unresolved, never a key value. Exported for testing.
+ */
+export declare function fillDerivedPlatformStamps(schema: CanonicalSchema, rowsByCatalogue: Map<string, CatalogueRow[]>, platformBySource: ReadonlyMap<string, string>, findings: FindingsLog): void;
 /**
  * M-ADR 0133 §4.2c open hygiene, shipped with M-ADR 0189 §4.4, TIER-GATED by
  * M-ADR 0208 §4.2 — gated, not skipped: a skipped check fails toward success.

package/dist/lib/catalogue/aggregate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aggregate.d.ts","sourceRoot":"","sources":["../../../src/lib/catalogue/aggregate.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAuB,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAoB,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGpE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAmB5C,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,mEAAmE;IACnE,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAEzC,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,eAAe,CAAC,CAmmB1B;AA2DD,wBAAgB,oBAAoB,CAClC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EAC5C,QAAQ,EAAE,WAAW,GACpB,IAAI,CAkFN;AA6RD;;;;;;GAMG;AACH,iBAAS,WAAW,CAClB,SAAS,EAAE,YAAY,EACvB,IAAI,EAAE,SAAS,YAAY,EAAE,EAC7B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,YAAY,EAAE,CAOhB;AA2ND;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,SAAS,YAAY,EAAE,EACvC,QAAQ,EAAE,SAAS,YAAY,EAAE,EACjC,QAAQ,EAAE,WAAW,GACpB,YAAY,EAAE,CAiDhB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,SAAS,YAAY,EAAE,EACjC,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,EACtC,QAAQ,EAAE,WAAW,GACpB,IAAI,CAoBN;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,qGAAqG;IACrG,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,sEAAsE;IACtE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mFAAmF;IACnF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yGAAyG;IACzG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+GAA+G;IAC/G,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,kEAAkE;IAClE,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,oFAAoF;IACpF,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EAC5C,QAAQ,EAAE,WAAW,GACpB,mBAAmB,CA6oBrB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,eAAe,EACvB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EAC5C,QAAQ,EAAE,WAAW,GACpB,oBAAoB,CAgFtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,QAAQ,EAAE,WAAW,EACrB,IAAI,GAAE,UAAU,GAAG,cAA2B,GAC7C,IAAI,CAuCN;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,QAAQ,EAAE,WAAW,GACpB,IAAI,CAoBN;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,gCAAgC,CAC9C,mBAAmB,EAAE,SAAS,YAAY,EAAE,EAC5C,kBAAkB,EAAE,SAAS,YAAY,EAAE,EAC3C,QAAQ,EAAE,WAAW,EACrB,YAAY,GAAE,SAAS,YAAY,EAAO,GACzC,YAAY,EAAE,CA2KhB;AAID,eAAO,MAAM,aAAa;;;CAAqC,CAAC"}
+{"version":3,"file":"aggregate.d.ts","sourceRoot":"","sources":["../../../src/lib/catalogue/aggregate.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAuB,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAoB,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAIpE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAmB5C,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,mEAAmE;IACnE,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAEzC,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,eAAe,CAAC,CA4nB1B;AAED,UAAU,WAAW;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAoDD,wBAAgB,oBAAoB,CAClC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EAC5C,QAAQ,EAAE,WAAW,GACpB,IAAI,CAkFN;AA8MD;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAAgB,CAAC;AAE9E,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,eAAe,EACvB,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC,EAC7D,qBAAqB,GAAE,SAAS,MAAM,EAAO,GAC5C,WAAW,EAAE,CAmDf;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,eAAe,EACvB,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC,EAC7D,qBAAqB,EAAE,SAAS,MAAM,EAAE,EACxC,QAAQ,EAAE,WAAW,EACrB,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GACzB,IAAI,CAyCN;AAkDD;;;;;;GAMG;AACH,iBAAS,WAAW,CAClB,SAAS,EAAE,YAAY,EACvB,IAAI,EAAE,SAAS,YAAY,EAAE,EAC7B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,YAAY,EAAE,CAOhB;AA2ND;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,SAAS,YAAY,EAAE,EACvC,QAAQ,EAAE,SAAS,YAAY,EAAE,EACjC,QAAQ,EAAE,WAAW,GACpB,YAAY,EAAE,CAiDhB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,SAAS,YAAY,EAAE,EACjC,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,EACtC,QAAQ,EAAE,WAAW,GACpB,IAAI,CAoBN;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,qGAAqG;IACrG,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,sEAAsE;IACtE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mFAAmF;IACnF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yGAAyG;IACzG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+GAA+G;IAC/G,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,kEAAkE;IAClE,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,oFAAoF;IACpF,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EAC5C,QAAQ,EAAE,WAAW,GACpB,mBAAmB,CA6oBrB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,eAAe,EACvB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EAC5C,QAAQ,EAAE,WAAW,GACpB,oBAAoB,CAgFtB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,eAAe,EACvB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EAC5C,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7C,QAAQ,EAAE,WAAW,GACpB,IAAI,CAuDN;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,QAAQ,EAAE,WAAW,EACrB,IAAI,GAAE,UAAU,GAAG,cAA2B,GAC7C,IAAI,CAuCN;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,QAAQ,EAAE,WAAW,GACpB,IAAI,CAoBN;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,gCAAgC,CAC9C,mBAAmB,EAAE,SAAS,YAAY,EAAE,EAC5C,kBAAkB,EAAE,SAAS,YAAY,EAAE,EAC3C,QAAQ,EAAE,WAAW,EACrB,YAAY,GAAE,SAAS,YAAY,EAAO,GACzC,YAAY,EAAE,CA2KhB;AAID,eAAO,MAAM,aAAa;;;CAAqC,CAAC"}

package/dist/lib/catalogue/aggregate.js

@@ -29,6 +29,7 @@ import { readCatalogueCsv, parseCatalogueCsv } from "./csv-reader.js";
 import { writeCatalogue } from "./csv-writer.js";
 import { buildLegacyContractIdMap } from "./contract-id.js";
 import { validateWithEngineToLog } from "./engine-validator.js";
+import { PLATFORM_STAMP_COLUMN, isPlatformScopedFk } from "./fk-validator.js";
 import { FindingsLog } from "./findings.js";
 import { readLockFile } from "../lock-file.js";
 import { mergeEdgeLabel } from "./builders/edge-label-merge.js";
@@ -112,6 +113,14 @@ export async function runCatalogueAggregate(inputs, write) {
         rowsByCatalogue.set(cat.name, []);
     }
     perSiblingCounts.set(rootManifest.sddId, await mergeCatalogues(schema, rowsByCatalogue, join(sddPath, "catalogues"), rootManifest.sddId, rootIsOrganisation ? null : rootManifest.sddId));
+    // source_sdd_id -> the platform the §4.4 fill rule assigned it. Kept for the final
+    // pass (fillDerivedPlatformStamps): rows the aggregator itself constructs AFTER the
+    // node loader (0189 adjudication conversions, re-derived edges) set source_sdd_id
+    // explicitly and would otherwise leave platform_sdd_id empty under FK PASS —
+    // the same silent shape as the empty platform leg on cross_sdd_platform_capability.
+    const platformBySource = new Map();
+    if (!rootIsOrganisation)
+        platformBySource.set(rootManifest.sddId, rootManifest.sddId);
     for (const sib of aggManifest.siblings) {
         // M-ADR 0208 §4.4 fill rule, by pull path. An empty stamp is UNRESOLVED and is
         // reported below by checkPlatformKindUniqueness; it is never a key value.
@@ -141,6 +150,8 @@ export async function runCatalogueAggregate(inputs, write) {
         if (crossCheck.deprecatedPlatformField.has(sib.sddId)) {
             findings.add("convention", `sibling "${sib.sddId}" manifest uses deprecated key \`ecosystem_root\` — rename to \`platform_sdd_id\` (M-ADR 0208 §4.3; alias removed at 2.0.0)`);
         }
+        if (platformSddId !== null)
+            platformBySource.set(sib.sddId, platformSddId);
         perSiblingCounts.set(sib.sddId, await mergeCatalogues(schema, rowsByCatalogue, sib.cataloguesPath, sib.sddId, platformSddId));
     }
     // 5a. Derive cross_sdd_platform_capability — federated edge, schema 2.9.0.
@@ -424,6 +435,11 @@ export async function runCatalogueAggregate(inputs, write) {
         `${adjudication.containerConverted} container conversions (${adjudication.containerEdgesRewritten} edges → container_dependency, ` +
         `${adjudication.systemFallbackEdges} stuck edges → system_system_dependency at L1), ` +
         `${adjudication.exempted} exempted, ${adjudication.unverified} unverified\n`);
+    // 5f-bis. Rows constructed at THIS tier after the node loader (adjudication
+    // conversions, re-derived edges) carry source_sdd_id but no platform stamp.
+    // Fill them now that every derivation has run (M-ADR 0208 §4.4 as applied to
+    // aggregator-constructed rows); whatever stays empty is reported, never keyed on.
+    fillDerivedPlatformStamps(schema, rowsByCatalogue, platformBySource, findings);
     // 5g. Platform-kind uniqueness (M-ADR 0133 §4.2c open hygiene).
     checkPlatformKindUniqueness(rowsByCatalogue.get("c4_systems") ?? [], findings, rootIsOrganisation ? "organisation" : "platform");
     // 5h. M-ADR 0203 §4.4 cross-SDD re-key: the contract-id migration derives
@@ -439,8 +455,12 @@ export async function runCatalogueAggregate(inputs, write) {
     // was never printed.
     write(`  contract-id cut window (M-ADR 0203 §4.4): ${contractRekey.rekeyed} cross-SDD reference(s) re-keyed, ` +
         `${contractRekey.deduped} duplicate fact(s) dropped, ${contractRekey.ambiguous} ambiguous left dangling\n`);
-    // 6. Duplicate primary key check.
-    const duplicates = findDuplicatePrimaryKeys(schema, rowsByCatalogue);
+    // 6. Duplicate primary key check. M-ADR 0208 §4.4 (F-D): at organisation
+    // tier the key of `domains` is (platform_sdd_id, id) — two platforms may
+    // each own `identity`. Everywhere else, and for every other catalogue,
+    // the scalar pk. An empty stamp is unresolved, never a key.
+    const platformScopedTargets = rootIsOrganisation ? PLATFORM_SCOPED_AT_ORGANISATION : [];
+    const duplicates = findDuplicatePrimaryKeys(schema, rowsByCatalogue, platformScopedTargets);
     if (duplicates.length > 0) {
         write(`\nDuplicate primary keys (${duplicates.length}) — aggregation fails:\n`);
         for (const d of duplicates) {
@@ -463,10 +483,16 @@ export async function runCatalogueAggregate(inputs, write) {
         });
     }
     // 7. Full FK validation, treating external as internal.
-    const { fk } = await validateWithEngineToLog(schema, rowsByCatalogue, findings, { treatExternalAsInternal: true }, 
+    const { fk } = await validateWithEngineToLog(schema, rowsByCatalogue, findings, { treatExternalAsInternal: true, platformScopedTargets }, 
     // The aggregation tier has never emitted enum findings; the cutover
     // changes no tier's finding surface (M-ADR 0205 §4.4).
     { logEnumFindings: false });
+    // 7b. M-ADR 0208 §4.4 (F-D): report the domain-key state at organisation
+    // tier. Always emitted there — an absent line is indistinguishable from a
+    // check that never ran (M-ADR 0200 §4.3).
+    if (rootIsOrganisation) {
+        checkPlatformScopedKeyAmbiguity(schema, rowsByCatalogue, platformScopedTargets, findings, write);
+    }
     // 8. Emit aggregated catalogues + aggregation-manifest.json.
     const outDir = resolveOutDir(sddPath, inputs.outDir);
     const rowCounts = new Map();
@@ -815,11 +841,21 @@ async function enrichFederatedServiceMetadata(rowsByCatalogue, siblings, finding
         rowsByCatalogue.set("services", enriched);
     }
 }
-function findDuplicatePrimaryKeys(schema, rowsByCatalogue) {
+/**
+ * M-ADR 0208 §4.4: the catalogues whose organisation-tier key is
+ * `(platform_sdd_id, <pk>)`. Only `domains` — a domain is a bounded context
+ * OF a platform, so the pair is its natural key; every other catalogue's ids
+ * are already platform-qualified by construction or are method-scoped.
+ */
+export const PLATFORM_SCOPED_AT_ORGANISATION = ["domains"];
+export function findDuplicatePrimaryKeys(schema, rowsByCatalogue, platformScopedTargets = []) {
     const out = [];
     for (const cat of schema.catalogues) {
         const rows = rowsByCatalogue.get(cat.name) ?? [];
+        // Scoped iff asked for AND the catalogue carries the stamp column.
+        const scoped = isPlatformScopedFk(cat, cat, { platformScopedTargets });
         const byKey = new Map();
+        const stampsByKey = new Map();
         for (const row of rows) {
             const pk = row[cat.primaryKey];
             if (pk === undefined || pk === null || pk === "")
@@ -829,8 +865,31 @@ function findDuplicatePrimaryKeys(schema, rowsByCatalogue) {
             const list = byKey.get(value) ?? [];
             list.push(sourceSdd || "<unknown>");
             byKey.set(value, list);
+            if (scoped) {
+                const stamps = stampsByKey.get(value) ?? [];
+                stamps.push(String(row[PLATFORM_STAMP_COLUMN] ?? "").trim());
+                stampsByKey.set(value, stamps);
+            }
         }
         for (const [value, sources] of byKey) {
+            if (sources.length > 1 && scoped) {
+                // n rows are distinct under (stamp, pk) iff every stamp is present
+                // and all differ. An EMPTY stamp is unresolved, never a key: it
+                // collides with everything (§4.4 — "two children contributing
+                // (∅, identity) must produce a finding, not a silent merge").
+                // Mirrors ddl-generator pkQuery's HAVING clause.
+                const stamps = stampsByKey.get(value) ?? [];
+                const distinctNonEmpty = new Set(stamps.filter((st) => st !== "")).size;
+                if (distinctNonEmpty === stamps.length)
+                    continue;
+                out.push({
+                    catalogue: cat.name,
+                    primaryKey: `(${PLATFORM_STAMP_COLUMN}, ${cat.primaryKey})`,
+                    value: `${value} [stamps: ${stamps.map((st) => st || "∅").join(", ")}] — an empty stamp is unresolved, never a key (M-ADR 0208 §4.4)`,
+                    sources,
+                });
+                continue;
+            }
             if (sources.length > 1) {
                 out.push({
                     catalogue: cat.name,
@@ -843,6 +902,58 @@ function findDuplicatePrimaryKeys(schema, rowsByCatalogue) {
     }
     return out;
 }
+/**
+ * M-ADR 0208 §4.4 (F-D), organisation tier. For each platform-scoped
+ * catalogue: which pks are owned by more than one platform, and how many
+ * referencing rows carry such a pk with NO stamp of their own — those
+ * references resolve by scalar fallback (the FK check cannot fail them
+ * without inventing a platform) but they are AMBIGUOUS, and this says so.
+ * One line per scoped catalogue, always written; a coverage finding only
+ * when ambiguity exists. Fires zero on an estate where no id is shared.
+ */
+export function checkPlatformScopedKeyAmbiguity(schema, rowsByCatalogue, platformScopedTargets, findings, write) {
+    for (const target of schema.catalogues) {
+        if (!isPlatformScopedFk(target, target, { platformScopedTargets }))
+            continue;
+        const owners = new Map();
+        for (const row of rowsByCatalogue.get(target.name) ?? []) {
+            const pk = String(row[target.primaryKey] ?? "");
+            if (pk === "")
+                continue;
+            const set = owners.get(pk) ?? new Set();
+            set.add(String(row[PLATFORM_STAMP_COLUMN] ?? "").trim() || "∅");
+            owners.set(pk, set);
+        }
+        const shared = new Set([...owners].filter(([, o]) => o.size > 1).map(([pk]) => pk));
+        let ambiguous = 0;
+        const where = [];
+        for (const cat of schema.catalogues) {
+            for (const fk of cat.foreignKeys) {
+                if (fk.references.split(".")[0] !== target.name)
+                    continue;
+                if (!isPlatformScopedFk(cat, target, { platformScopedTargets }))
+                    continue;
+                let n = 0;
+                for (const row of rowsByCatalogue.get(cat.name) ?? []) {
+                    const v = String(row[fk.column] ?? "");
+                    if (v === "" || !shared.has(v))
+                        continue;
+                    if (String(row[PLATFORM_STAMP_COLUMN] ?? "").trim() === "")
+                        n++;
+                }
+                if (n > 0) {
+                    ambiguous += n;
+                    where.push(`${cat.name}.${fk.column}=${n}`);
+                }
+            }
+        }
+        write(`  ${target.name} key at organisation tier is (${PLATFORM_STAMP_COLUMN}, ${target.primaryKey}) (M-ADR 0208 §4.4): ` +
+            `${shared.size} id(s) owned by more than one platform, ${ambiguous} unstamped referencing row(s) ambiguous\n`);
+        if (ambiguous > 0) {
+            findings.add("coverage", `${target.name}: ${ambiguous} referencing row(s) with EMPTY ${PLATFORM_STAMP_COLUMN} name an id owned by more than one platform [${[...shared].sort().join(", ")}] (${where.join(", ")}) — resolved by scalar fallback, AMBIGUOUS until the row is stamped (M-ADR 0208 §4.4)`);
+        }
+    }
+}
 async function mergeCatalogues(schema, rowsByCatalogue, cataloguesDir, sourceSddId, 
 /** M-ADR 0208 §4.4: value to fill into `platform_sdd_id` when empty; null = do not fill. */
 platformSddId) {
@@ -1854,6 +1965,75 @@ export function rekeyLegacyContractRefs(schema, rowsByCatalogue, findings) {
     }
     return { rekeyed, deduped, ambiguous };
 }
+/**
+ * Fill `platform_sdd_id` on rows the aggregator constructed after the node
+ * loader stamped its inputs (M-ADR 0208 §4.4). The node loader stamps every
+ * row it MERGES; rows built at this tier from those inputs — 0189 §4.4
+ * adjudication conversions into system_system_dependency / container_dependency,
+ * re-derived edges — set source_sdd_id explicitly and were emitted with an empty
+ * platform stamp under FK PASS (measured: 38 of 38 system_system_dependency rows
+ * and 2 of 208 container_dependency rows on the forward reference estate, the
+ * other 206 stamped by the loader; 26 of 26 and 13 of 194 on the reverse estate's
+ * platform tier). Resolution order per row: the §4.4 fill-rule platform recorded
+ * for its source_sdd_id; else the single stamp already observed on that source's
+ * rows anywhere in the aggregate (a source whose rows carry two different stamps
+ * is ambiguous and is NOT guessed). Whatever remains empty is reported as
+ * coverage — an empty stamp is unresolved, never a key value. Exported for testing.
+ */
+export function fillDerivedPlatformStamps(schema, rowsByCatalogue, platformBySource, findings) {
+    const stamped = schema.catalogues.filter((c) => c.columns.some((col) => col.name === "platform_sdd_id") &&
+        c.columns.some((col) => col.name === "source_sdd_id"));
+    const observed = new Map();
+    for (const cat of stamped) {
+        for (const r of rowsByCatalogue.get(cat.name) ?? []) {
+            const src = String(r["source_sdd_id"] ?? "").trim();
+            const pf = String(r["platform_sdd_id"] ?? "").trim();
+            if (src === "" || pf === "")
+                continue;
+            if (!observed.has(src))
+                observed.set(src, new Set());
+            observed.get(src).add(pf);
+        }
+    }
+    const resolve = (src) => {
+        const ruled = platformBySource.get(src);
+        if (ruled !== undefined)
+            return ruled;
+        const seen = observed.get(src);
+        if (seen !== undefined && seen.size === 1)
+            return [...seen][0];
+        return null;
+    };
+    let filled = 0;
+    const unresolved = [];
+    for (const cat of stamped) {
+        const rows = rowsByCatalogue.get(cat.name);
+        if (rows === undefined || rows.length === 0)
+            continue;
+        let catEmpty = 0;
+        const next = rows.map((r) => {
+            if (String(r["platform_sdd_id"] ?? "").trim() !== "")
+                return r;
+            const src = String(r["source_sdd_id"] ?? "").trim();
+            const value = src === "" ? null : resolve(src);
+            if (value === null) {
+                catEmpty++;
+                return r;
+            }
+            filled++;
+            return { ...r, platform_sdd_id: value };
+        });
+        rowsByCatalogue.set(cat.name, next);
+        if (catEmpty > 0)
+            unresolved.push(`${cat.name} ${catEmpty}`);
+    }
+    if (filled > 0) {
+        findings.add("inferred", `platform_sdd_id: ${filled} aggregator-constructed row(s) stamped from their source_sdd_id after derivation (M-ADR 0208 §4.4) — the node loader stamps only the rows it merges`);
+    }
+    if (unresolved.length > 0) {
+        findings.add("coverage", `platform_sdd_id: rows still EMPTY after the final pass [${unresolved.join(", ")}] — source unknown to the fill rule, or its rows carry more than one stamp; unresolved, not a key (M-ADR 0208 §4.4)`);
+    }
+}
 /**
  * M-ADR 0133 §4.2c open hygiene, shipped with M-ADR 0189 §4.4, TIER-GATED by
  * M-ADR 0208 §4.2 — gated, not skipped: a skipped check fails toward success.