Requires an unauthenticated caller-owned baseline; returns real current NS/MX records, added/removed sets and tri-state target-provider transition. Current DNS comes from one bounded native recursive-resolver query; existing Dossier provides context. Resolver caching may apply; no account ownership or global migration-completion claim. Existing provider patterns are reused without new invented att