X_PACKAGE_DUPLICATED
Means
two copies of one registry-holding framework package (@ultimat3/i18n, @ultimat3/policy, @ultimat3/entity) are installed in one app
Typical cause
a workspace pinning an older range than the root (packages/i18n on ^19.0.0, the root on ^19.1.0), or two resolutions of one version. Each copy is its own module instance with its own registry, so the app registers into one and the CLI reads the other: x i18n check reported X_CATALOG_UNREGISTERED over a defineCatalogs() call that was exactly where its fix said to put it, and the policy step is green over an undeclared grant because isKnownPermission checks nothing while its own copy holds no declaration. Judged by realpath — a workspace symlink to one checkout is one copy
Fix
the finding names both copies and the package.json to pin: set every @ultimat3/* to one exact version there, then bun install; two copies of ONE version are collapsed by bun install --force. x i18n check --json and x verify --only policy --json re-check