Read-only external metadata federation: synchronous and durable Flight paths share one exact snapshot rule; the Iceberg catalog remains the metadata and commit authority.
SQL admission
• Full `iceberg.namespace.table` references only.
• Deployment allowlist and principal grant both apply.
• External discovery is never a request-path feature.
Snapshot semantics
• Current loads use a bounded cache and per-key single-flight.
• DoGet and durable workers use the same sealed snapshot ID.
• Expired upstream snapshots fail; they never fall forward.
Authority boundary
• Iceberg owns its metadata, commits, and GC.
• Query reads data files directly with its workload identity.
• Lake registry and Metasrv stay outside the federation path.