[masarray]

P0-A — generic IEC 61850 live identity trust model

Exact head: ccf31f60095ea65f9095514f0fa0102060962049. Stacked directly on engine PR #173 (51c2eefd61d6bcbe1116fda6b781b74bb9cf06da) so typed status report behavior is preserved.

Root cause and correction

• Former resolver stripped a known LD stem from a legitimately shared domain prefix (SIEBCU → SIE); suffix/common-prefix inference assigned unjustified High confidence.
• Domain inventory now preserves exact case-sensitive MMS domains/aliases. Common-prefix SIEBCU and known LD suffix guesses remain Medium/provisional; explicit operator names are not wire-confirmed.
• Trusted SCL matcher requires an exact observed LD set, unique topology and AP, matching declared ConnectedAP endpoint IP and selected AP, and refuses wrong domain case, missing/ambiguous IP, multi-AP uncertainty.
• Consumer separately requires unchanged SHA-256 of operator-opened IID or verified remembered source; source SHA is never inferred from MMS.

Evidence

• Regression first added as a distinct commit b27842a950959028421c96119e3e62bd9fa5c519. Fail-before-fix behavior established from source; no separately executed RED CI is claimed.
• Windows engine CI SUCCESS https://github.com/masarray/ARIEC61850/actions/runs/39228439974
• Full stacked consumer CI R7 SUCCESS https://github.com/masarray/arsas/actions/runs/39233599772, engine 1152/1152; consumer 2368/2368.
• Consumer exact-SHA integration: P0-A: integrate verified identity engine trial with endpoint/AP-bound SCL arsas#625.

CODE PASS only, field acceptance unverified. No protocol writes, no physical endorsement, no merge until separate acceptance.

[masarray]

Consolidation cleanup (2026-10-22): this immutable source HEAD ccf31f60095ea65f9095514f0fa0102060962049 is already a verified ancestor of DRAFT #190 candidate 14b19d30466fd296ad1e6d0bddcdd574992bc464 (0 missing commits), whose Windows merged-tree CI run https://github.com/masarray/ARIEC61850/actions/runs/39778971482 passed 1,262/1,262 tests. Closing this redundant stacked PR without merging it independently. Its branch and all commits remain recoverable, including the ARSAS pinned historical engine source when relevant. #190 has NOT been promoted to main, physical FAT acceptance is NOT claimed, and no consumer engine lock is changed. Reopen if this consolidation is withdrawn.