The catalog's sources as a dataset's definition reads them: each source's latest committed state, read as trusted code, the catalog's own, in the catalog's tenant.