The owner a read filters by: ownerId, except that an owner derived from {id} is not used (the aggregate ID already pins the row, and an aggregate created in-process may store a blank owner); a Command-Owner-Id that agrees with it still applies, as in 9.2.