feat(namespace): conformance green 19/19 — data-aware did-you-mean on unindexed bare addresses, ordering contract on the column top-K path (never drop, nulls last, ties by id), shape-complete addressed reads (entity views AND raw storage shapes, shadow-proof both scopes), per-key source matching for dotted addresses; refusal classes unified under UnresolvableFieldError

tests/conformance/namespace-law.test.ts

@@ -294,7 +294,9 @@ describe.skipIf(!lawActive)('namespace law — bare/system/metadata field addres
 
     brain.defineAggregate({
       name: 'ns_law_by_team_bare',
-      source: { type: NounType.Document, where: { subtype: 'ns-law-group-bare' } },
+      // system.subtype — bare 'subtype' would address user metadata under the
+      // law (the exact migration every fleet consumer's aggregates make).
+      source: { type: NounType.Document, where: { 'system.subtype': 'ns-law-group-bare' } },
       groupBy: ['team'],
       metrics: { count: { op: 'count' } }
     })