feat(trace-topology): IdentityUnknown reconciliation check (v0.11.0)

artifacts/requirements.yaml

@@ -1946,6 +1946,28 @@ artifacts:
     status: implemented
     tags: [trace-topology, properties, identity, ip, v0100]
 
+  - id: REQ-TRACE-TOPOLOGY-008
+    type: requirement
+    title: IdentityUnknown reconciliation check (component-borne identities)
+    description: >
+      System shall provide the IdentityUnknown reconciliation check in
+      spar-trace-topology::engine — the first of the five v1
+      deterministic checks. The check builds a DeclaredModel index by
+      walking an instantiated AADL SystemInstance and reading the
+      Spar_Identity::MAC_Address and Spar_Identity::LLDP_Chassis_Id
+      properties of every component, then flags any unicast MAC observed
+      in the PCAPNG capture, or any LLDP neighbor chassis-id observed in
+      the topology snapshot, that no AADL component declares.
+      Group-addressed (multicast / broadcast) MACs are exempt — they
+      reconcile against Multicast_Group, a connection-borne surface.
+      Findings are deterministic: PCAPNG findings first then LLDP
+      findings, each ascending, each distinct identity reported once.
+      Connection-borne identities (Stream_Handle, Multicast_Group,
+      VLAN_ID) and the other four checks are deferred to sibling v0.11.0
+      commits. Per docs/designs/v0.10.0-trace-topology.md §4.1.
+    status: implemented
+    tags: [trace-topology, reconcile, engine, v0110, track-g]
+
   - id: REQ-BINDING-002
     type: requirement
     title: Actual_Processor_Binding accepts nested dotted reference paths

artifacts/verification.yaml

@@ -2539,6 +2539,31 @@ artifacts:
       - type: satisfies
         target: REQ-TRACE-TOPOLOGY-007
 
+  - id: TEST-TRACE-TOPOLOGY-IDENTITY-UNKNOWN
+    type: feature
+    title: IdentityUnknown check flags undeclared MACs and chassis-ids
+    description: >
+      Unit tests in crates/spar-trace-topology/src/engine.rs cover MAC
+      parsing (colon / dash / case), malformed-MAC rejection, the
+      multicast group-bit filter, chassis-id normalisation, the clean
+      path, undeclared-MAC and undeclared-chassis-id findings, the
+      multicast / broadcast exemption, finding dedup + sort determinism,
+      a chassis-id equal to a declared MAC, and ingest-failure surfacing.
+      Integration tests in
+      crates/spar-trace-topology/tests/identity_reconcile.rs exercise
+      DeclaredModel::from_instance against a real instantiated AADL model
+      carrying Spar_Identity properties.
+    fields:
+      method: automated-test
+      steps:
+        - run: cargo test -p spar-trace-topology --lib -- engine::tests
+        - run: cargo test -p spar-trace-topology --test identity_reconcile
+    status: passing
+    tags: [trace-topology, reconcile, engine, v0110, track-g]
+    links:
+      - type: satisfies
+        target: REQ-TRACE-TOPOLOGY-008
+
   - id: TEST-BINDING-NESTED-PATH
     type: feature
     title: Nested binding paths resolve correctly