Implement identity canon alignment

src/user_engine/domain/__init__.py

@@ -11,6 +11,8 @@ from user_engine.domain.models import (
     AuthorizationDecision,
     AuthorizationEffect,
     AuthorizationRequest,
+    CanonEntityReference,
+    CanonRelationshipReference,
     Catalog,
     CatalogLifecycle,
     ExternalIdentity,
@@ -41,6 +43,8 @@ __all__ = [
     "AuthorizationDecision",
     "AuthorizationEffect",
     "AuthorizationRequest",
+    "CanonEntityReference",
+    "CanonRelationshipReference",
     "Catalog",
     "CatalogLifecycle",
     "ExternalIdentity",

src/user_engine/domain/models.py

@@ -99,6 +99,27 @@ class AuthorizationEffect(StrEnum):
     NOT_APPLICABLE = "not_applicable"
 
 
+@dataclass(frozen=True)
+class CanonEntityReference:
+    concept: str
+    identifier: str
+    scope: str | None = None
+    source_system: str = "user-engine"
+    local_type: str | None = None
+    evidence_id: str | None = None
+
+
+@dataclass(frozen=True)
+class CanonRelationshipReference:
+    relationship_type: str
+    source: CanonEntityReference
+    target: CanonEntityReference
+    scope: str | None = None
+    source_system: str = "user-engine"
+    evidence_id: str | None = None
+    lifecycle_state: str = "active"
+
+
 @dataclass(frozen=True)
 class Actor:
     issuer: str