Add cross-dataset referential integrity checks

validate_rows is intra-row and single-table — its unique rule only dedupes
within one batch. Add dbt-style generic checks: check_foreign_key
(parent/child across two tables), check_unique_key (single/composite),
check_accepted_values, and check_row_count, operating on rows already
loaded by load_rows/query_sqlite. Wired through facade, executor (four
AC_check_* commands), MCP, and the Script Builder with a headless test
batch and EN/Zh docs.

Author: JE-Chen

README.md

@@ -13,6 +13,7 @@
 
 ## Table of Contents
 
+- [What's new (2026-06-22) — Referential Integrity Checks](#whats-new-2026-06-22--referential-integrity-checks)
 - [What's new (2026-06-22) — URI-Scheme Value References](#whats-new-2026-06-22--uri-scheme-value-references)
 - [What's new (2026-06-21) — W3C Baggage Propagation](#whats-new-2026-06-21--w3c-baggage-propagation)
 - [What's new (2026-06-21) — Dataset Diff (Row-Set Change Report)](#whats-new-2026-06-21--dataset-diff-row-set-change-report)
@@ -138,6 +139,12 @@
 
 ---
 
+## What's new (2026-06-22) — Referential Integrity Checks
+
+Foreign-key, unique, accepted-values and row-count checks across tables. Full reference: [`docs/source/Eng/doc/new_features/v86_features_doc.rst`](docs/source/Eng/doc/new_features/v86_features_doc.rst).
+
+- **`check_foreign_key` / `check_unique_key` / `check_accepted_values` / `check_row_count`** (`AC_check_foreign_key`, `AC_check_unique_key`, `AC_check_accepted_values`, `AC_check_row_count`): `validate_rows` is intra-row, single-table (its `unique` only dedupes within one batch). This adds dbt-style generic checks — parent/child foreign keys across two tables, single/composite key uniqueness, accepted-values, and row-count bounds — over rows from `load_rows`/`query_sqlite`. Pure-stdlib, deterministic.
+
 ## What's new (2026-06-22) — URI-Scheme Value References
 
 Store pointers, not secrets, in config. Full reference: [`docs/source/Eng/doc/new_features/v85_features_doc.rst`](docs/source/Eng/doc/new_features/v85_features_doc.rst).

README/README_zh-CN.md

@@ -12,6 +12,7 @@
 
 ## 目录
 
+- [本次更新 (2026-06-22) — 参照完整性检查](#本次更新-2026-06-22--参照完整性检查)
 - [本次更新 (2026-06-22) — URI-Scheme 值引用](#本次更新-2026-06-22--uri-scheme-值引用)
 - [本次更新 (2026-06-21) — W3C Baggage 传播](#本次更新-2026-06-21--w3c-baggage-传播)
 - [本次更新 (2026-06-21) — 数据集差异(数据行变更报告)](#本次更新-2026-06-21--数据集差异数据行变更报告)
@@ -137,6 +138,12 @@
 
 ---
 
+## 本次更新 (2026-06-22) — 参照完整性检查
+
+跨数据表的外键、唯一键、accepted-values 与行数检查。完整参考:[`docs/source/Zh/doc/new_features/v86_features_doc.rst`](../docs/source/Zh/doc/new_features/v86_features_doc.rst)。
+
+- **`check_foreign_key` / `check_unique_key` / `check_accepted_values` / `check_row_count`**(`AC_check_foreign_key`、`AC_check_unique_key`、`AC_check_accepted_values`、`AC_check_row_count`):`validate_rows` 是单行、单表(其 `unique` 只在单批次内去重)。本功能补上 dbt 风格通用检查 —— 跨两表的父子外键、单一/复合键唯一性、accepted-values、行数范围 —— 作用于 `load_rows`/`query_sqlite` 的数据行。纯标准库、确定。
+
 ## 本次更新 (2026-06-22) — URI-Scheme 值引用
 
 在配置中存储指针而非机密。完整参考:[`docs/source/Zh/doc/new_features/v85_features_doc.rst`](../docs/source/Zh/doc/new_features/v85_features_doc.rst)。

README/README_zh-TW.md

@@ -12,6 +12,7 @@
 
 ## 目錄
 
+- [本次更新 (2026-06-22) — 參照完整性檢查](#本次更新-2026-06-22--參照完整性檢查)
 - [本次更新 (2026-06-22) — URI-Scheme 值參照](#本次更新-2026-06-22--uri-scheme-值參照)
 - [本次更新 (2026-06-21) — W3C Baggage 傳播](#本次更新-2026-06-21--w3c-baggage-傳播)
 - [本次更新 (2026-06-21) — 資料集差異(資料列變更報告)](#本次更新-2026-06-21--資料集差異資料列變更報告)
@@ -137,6 +138,12 @@
 
 ---
 
+## 本次更新 (2026-06-22) — 參照完整性檢查
+
+跨資料表的外鍵、唯一鍵、accepted-values 與筆數檢查。完整參考:[`docs/source/Zh/doc/new_features/v86_features_doc.rst`](../docs/source/Zh/doc/new_features/v86_features_doc.rst)。
+
+- **`check_foreign_key` / `check_unique_key` / `check_accepted_values` / `check_row_count`**(`AC_check_foreign_key`、`AC_check_unique_key`、`AC_check_accepted_values`、`AC_check_row_count`):`validate_rows` 是單列、單表(其 `unique` 只在單批次內去重)。本功能補上 dbt 風格通用檢查 —— 跨兩表的父子外鍵、單一/複合鍵唯一性、accepted-values、筆數範圍 —— 作用於 `load_rows`/`query_sqlite` 的資料列。純標準函式庫、具決定性。
+
 ## 本次更新 (2026-06-22) — URI-Scheme 值參照
 
 在設定中儲存指標而非機密。完整參考:[`docs/source/Zh/doc/new_features/v85_features_doc.rst`](../docs/source/Zh/doc/new_features/v85_features_doc.rst)。

docs/source/Eng/doc/new_features/v86_features_doc.rst

@@ -0,0 +1,43 @@
+Referential Integrity Checks
+============================
+
+``data_quality.validate_rows`` is strictly intra-row, single-table — its
+``unique`` rule only dedupes within one batch. There was no parent/child
+foreign-key check across two loaded tables, no composite-key uniqueness, and no
+standalone accepted-values / row-count assertion. This adds those dbt-style
+generic checks over rows already loaded by ``load_rows`` / ``query_sqlite``.
+
+Pure standard library (``collections``); imports no ``PySide6``. Every function
+is pure (rows in, report out), so it is fully deterministic in CI.
+
+Headless API
+------------
+
+.. code-block:: python
+
+    from je_auto_control import (
+        check_foreign_key, check_unique_key, check_accepted_values,
+        check_row_count, load_rows,
+    )
+
+    orders = load_rows("orders.csv")
+    users = load_rows("users.csv")
+
+    fk = check_foreign_key(orders, "user_id", users, "id")   # {ok, violations, missing}
+    pk = check_unique_key(orders, ["region", "id"])          # {ok, duplicates}
+    av = check_accepted_values(orders, "status", ["open", "closed"])
+    rc = check_row_count(orders, minimum=1)                  # {ok, count}
+
+``check_foreign_key`` flags non-null child values absent from the parent column
+(dbt ``relationships``). ``check_unique_key`` reports duplicate single or
+composite keys. ``check_accepted_values`` lists non-null values outside the
+allowed set. ``check_row_count`` verifies the count falls within optional
+``minimum`` / ``maximum`` bounds. Each returns an ``ok`` flag plus details.
+
+Executor commands
+-----------------
+
+``AC_check_foreign_key``, ``AC_check_unique_key``, ``AC_check_accepted_values``,
+and ``AC_check_row_count`` each take JSON ``rows`` (and a column / key / allowed
+list) and return the report. All are exposed as MCP tools
+(``ac_check_*``) and as Script Builder commands under **Data**.

docs/source/Eng/eng_index.rst

@@ -108,6 +108,7 @@ Comprehensive guides for all AutoControl features.
    doc/new_features/v83_features_doc
    doc/new_features/v84_features_doc
    doc/new_features/v85_features_doc
+   doc/new_features/v86_features_doc
    doc/ocr_backends/ocr_backends_doc
    doc/observability/observability_doc
    doc/operations_layer/operations_layer_doc

docs/source/Zh/doc/new_features/v86_features_doc.rst

@@ -0,0 +1,38 @@
+參照完整性檢查
+============
+
+``data_quality.validate_rows`` 嚴格限於單列、單表 —— 它的 ``unique`` 規則只在單一批次內去重。沒有跨兩個
+已載入資料表的父子外鍵檢查、沒有複合鍵唯一性,也沒有獨立的 accepted-values / row-count 斷言。本功能在
+已由 ``load_rows`` / ``query_sqlite`` 載入的資料列上,補上這些 dbt 風格的通用檢查。
+
+純標準函式庫(``collections``);不匯入 ``PySide6``。每個函式皆為純函式(輸入列、輸出報告),因此在 CI
+中完全具決定性。
+
+無頭 API
+--------
+
+.. code-block:: python
+
+    from je_auto_control import (
+        check_foreign_key, check_unique_key, check_accepted_values,
+        check_row_count, load_rows,
+    )
+
+    orders = load_rows("orders.csv")
+    users = load_rows("users.csv")
+
+    fk = check_foreign_key(orders, "user_id", users, "id")   # {ok, violations, missing}
+    pk = check_unique_key(orders, ["region", "id"])          # {ok, duplicates}
+    av = check_accepted_values(orders, "status", ["open", "closed"])
+    rc = check_row_count(orders, minimum=1)                  # {ok, count}
+
+``check_foreign_key`` 標記父欄位中不存在的非空子值(dbt ``relationships``)。``check_unique_key`` 回報
+重複的單一或複合鍵。``check_accepted_values`` 列出允許集合之外的非空值。``check_row_count`` 驗證筆數
+落在選用的 ``minimum`` / ``maximum`` 範圍內。每個皆回傳 ``ok`` 旗標加上細節。
+
+執行器命令
+----------
+
+``AC_check_foreign_key``、``AC_check_unique_key``、``AC_check_accepted_values`` 與 ``AC_check_row_count``
+各自接受 JSON ``rows``(以及欄位 / 鍵 / 允許清單)並回傳報告。全部皆以 MCP 工具(``ac_check_*``)以及
+Script Builder 中 **Data** 分類下的命令提供。

docs/source/Zh/zh_index.rst

@@ -108,6 +108,7 @@ AutoControl 所有功能的完整使用指南。
    doc/new_features/v83_features_doc
    doc/new_features/v84_features_doc
    doc/new_features/v85_features_doc
+   doc/new_features/v86_features_doc
    doc/ocr_backends/ocr_backends_doc
    doc/observability/observability_doc
    doc/operations_layer/operations_layer_doc

je_auto_control/__init__.py

@@ -167,6 +167,10 @@
 from je_auto_control.utils.dataset_diff import (
     cell_changes, diff_rows, summarize_diff,
 )
+# Cross-dataset referential integrity (foreign-key / unique / accepted values)
+from je_auto_control.utils.referential import (
+    check_accepted_values, check_foreign_key, check_row_count, check_unique_key,
+)
 # i18n / l10n testing: pseudo-localize, overflow + catalog checks
 from je_auto_control.utils.i18n_test import (
     check_catalog, check_overflow, pseudo_localize, pseudo_localize_catalog,
@@ -841,6 +845,8 @@ def start_autocontrol_gui(*args, **kwargs):
     "infer_schema", "profile_rows",
     "categorical_drift", "detect_drift", "ks_two_sample", "psi",
     "cell_changes", "diff_rows", "summarize_diff",
+    "check_accepted_values", "check_foreign_key", "check_row_count",
+    "check_unique_key",
     "check_catalog", "check_overflow", "pseudo_localize",
     "pseudo_localize_catalog",
     "Checkpoint", "CheckpointStore", "run_resumable",

je_auto_control/gui/script_builder/command_schema.py

@@ -1775,6 +1775,48 @@ def _add_resilience_specs(specs: List[CommandSpec]) -> None:
         ),
         description="Per-cell {key, column, old, new} changes between row-sets.",
     ))
+    specs.append(CommandSpec(
+        "AC_check_foreign_key", "Data", "Referential: Foreign Key",
+        fields=(
+            FieldSpec("child_rows", FieldType.STRING,
+                      placeholder='[{"user_id": 1}]'),
+            FieldSpec("child_col", FieldType.STRING, placeholder="user_id"),
+            FieldSpec("parent_rows", FieldType.STRING,
+                      placeholder='[{"id": 1}]'),
+            FieldSpec("parent_col", FieldType.STRING, placeholder="id"),
+        ),
+        description="Every child value must exist in the parent column.",
+    ))
+    specs.append(CommandSpec(
+        "AC_check_unique_key", "Data", "Referential: Unique Key",
+        fields=(
+            FieldSpec("rows", FieldType.STRING,
+                      placeholder='[{"id": 1}, {"id": 1}]'),
+            FieldSpec("cols", FieldType.STRING,
+                      placeholder='id  (or ["region", "id"])'),
+        ),
+        description="A single or composite key must be unique across rows.",
+    ))
+    specs.append(CommandSpec(
+        "AC_check_accepted_values", "Data", "Referential: Accepted Values",
+        fields=(
+            FieldSpec("rows", FieldType.STRING,
+                      placeholder='[{"status": "open"}]'),
+            FieldSpec("col", FieldType.STRING, placeholder="status"),
+            FieldSpec("allowed", FieldType.STRING,
+                      placeholder='["open", "closed"]'),
+        ),
+        description="Every non-null column value must be in the allowed set.",
+    ))
+    specs.append(CommandSpec(
+        "AC_check_row_count", "Data", "Referential: Row Count",
+        fields=(
+            FieldSpec("rows", FieldType.STRING, placeholder='[{"id": 1}]'),
+            FieldSpec("minimum", FieldType.INT, optional=True),
+            FieldSpec("maximum", FieldType.INT, optional=True),
+        ),
+        description="The row count must fall within the given bounds.",
+    ))
     specs.append(CommandSpec(
         "AC_rate_limit", "Flow", "Rate Limit (Token Bucket)",
         fields=(

je_auto_control/utils/executor/action_executor.py

@@ -3129,6 +3129,43 @@ def _categorical_drift(reference: Any, current: Any) -> Dict[str, Any]:
     return categorical_drift(reference, current)
 
 
+def _json_rows(rows: Any) -> Any:
+    import json
+    return json.loads(rows) if isinstance(rows, str) else rows
+
+
+def _check_foreign_key(child_rows: Any, child_col: str, parent_rows: Any,
+                       parent_col: str) -> Dict[str, Any]:
+    """Adapter: foreign-key referential check across two row-sets."""
+    from je_auto_control.utils.referential import check_foreign_key
+    return check_foreign_key(_json_rows(child_rows), child_col,
+                             _json_rows(parent_rows), parent_col)
+
+
+def _check_unique_key(rows: Any, cols: Any) -> Dict[str, Any]:
+    """Adapter: single/composite key uniqueness check."""
+    import json
+    from je_auto_control.utils.referential import check_unique_key
+    if isinstance(cols, str) and cols.strip().startswith("["):
+        cols = json.loads(cols)
+    return check_unique_key(_json_rows(rows), cols)
+
+
+def _check_accepted_values(rows: Any, col: str, allowed: Any) -> Dict[str, Any]:
+    """Adapter: accepted-values check for a column."""
+    from je_auto_control.utils.referential import check_accepted_values
+    return check_accepted_values(_json_rows(rows), col, _json_rows(allowed))
+
+
+def _check_row_count(rows: Any, minimum: Any = None,
+                     maximum: Any = None) -> Dict[str, Any]:
+    """Adapter: row-count bounds check."""
+    from je_auto_control.utils.referential import check_row_count
+    low = int(minimum) if minimum is not None else None
+    high = int(maximum) if maximum is not None else None
+    return check_row_count(_json_rows(rows), low, high)
+
+
 def _coerce_diff_inputs(old_rows: Any, new_rows: Any, key: Any):
     import json
     if isinstance(old_rows, str):
@@ -4249,6 +4286,10 @@ def __init__(self):
             "AC_categorical_drift": _categorical_drift,
             "AC_diff_rows": _diff_rows,
             "AC_cell_changes": _cell_changes,
+            "AC_check_foreign_key": _check_foreign_key,
+            "AC_check_unique_key": _check_unique_key,
+            "AC_check_accepted_values": _check_accepted_values,
+            "AC_check_row_count": _check_row_count,
             "AC_unified_diff": _unified_diff,
             "AC_apply_unified": _apply_unified,
             "AC_three_way_merge": _three_way_merge,