Data ownership migration: read model/API replacements for foreign readers,

dual-write/outbox → backfill → switch reads → stop old writes → drop columns, with verification (row-count + checksum reconciliation) and rollback per phase.