fix(driver-focas): equipment tags run the capability-matrix pre-flight authored tags get (R2-11, 05/UNDER-6)

src/Drivers/ZB.MOM.WW.OtOpcUa.Driver.FOCAS/FocasDriver.cs

@@ -68,7 +68,7 @@ public sealed class FocasDriver : IDriver, IReadable, IWritable, ITagDiscovery,
         _logger = logger ?? NullLogger<FocasDriver>.Instance;
         _resolver = new EquipmentTagRefResolver<FocasTagDefinition>(
             r => _tagsByName.TryGetValue(r, out var t) ? t : null,
-            r => FocasEquipmentTagParser.TryParse(r, out var d) ? d : null);
+            ResolveEquipmentTagRef);
         _poll = new PollGroupEngine(
             reader: ReadAsync,
             onChange: (handle, tagRef, snapshot) =>
@@ -234,6 +234,20 @@ public sealed class FocasDriver : IDriver, IReadable, IWritable, ITagDiscovery,
     internal bool IsParsedAddressCached(string reference) =>
         _parsedAddressesByTagName.ContainsKey(reference);
 
+    // Resolves an equipment-tag TagConfig reference into a FocasTagDefinition, applying the SAME
+    // capability pre-flight authored tags get at InitializeAsync (:105-119) — R2-11 (05/UNDER-6). A
+    // reference whose address is unparseable, whose bound device is unknown, or whose address violates
+    // the device series' capability matrix returns null ⇒ resolver miss ⇒ BadNodeIdUnknown at read time,
+    // instead of a wrong-status read reaching the wire. The negative is cached by the resolver.
+    private FocasTagDefinition? ResolveEquipmentTagRef(string reference)
+    {
+        if (!FocasEquipmentTagParser.TryParse(reference, out var def)) return null;
+        var parsed = FocasAddress.TryParse(def.Address);
+        if (parsed is null) return null;
+        if (!_devices.TryGetValue(def.DeviceHostAddress, out var device)) return null;
+        return FocasCapabilityMatrix.Validate(device.Options.Series, parsed) is null ? def : null;
+    }
+
     // Resolves a tag definition to its parsed FocasAddress, caching the result so that
     // equipment tags (resolver-produced, not seeded at InitializeAsync) don't re-parse the
     // address string on every ReadAsync / WriteAsync hot-path call.