Canonical identity + native aliases

Source registry

Search deduplicated source identities while retaining the original system IDs and route context. Rights and freshness states are conservative by design.