diff --git a/pgpm/slice/__tests__/object-graph.test.ts b/pgpm/slice/__tests__/object-graph.test.ts
new file mode 100644
index 000000000..b1e7e8a06
--- /dev/null
+++ b/pgpm/slice/__tests__/object-graph.test.ts
@@ -0,0 +1,94 @@
+import { loadModule, parseSqlProgram } from '@pgpmjs/transform';
+
+import {
+  buildObjectGraph,
+  danglingEdges,
+  objectKey,
+  objectsInSchemas,
+  prunablePrograms
+} from '../src/object-graph';
+
+beforeAll(async () => {
+  await loadModule();
+});
+
+const programsFrom = (scripts: Record<string, string>) =>
+  buildObjectGraph(Object.entries(scripts).map(([name, sql]) => [name, parseSqlProgram(sql)] as const));
+
+const fixture = () =>
+  programsFrom({
+    'schemas/auth': 'CREATE SCHEMA auth;',
+    'auth/users': 'CREATE TABLE auth.users (id uuid PRIMARY KEY);',
+    'auth/uid': `CREATE FUNCTION auth.uid() RETURNS uuid LANGUAGE sql AS $$ SELECT id FROM auth.users LIMIT 1 $$;`,
+    'app/posts': `CREATE TABLE app.posts (id uuid PRIMARY KEY, author uuid REFERENCES auth.users (id));`,
+    'app/policy': `CREATE POLICY p ON app.posts FOR SELECT USING (author = auth.uid());`
+  });
+
+describe('buildObjectGraph', () => {
+  it('collects object nodes with creating statements and reference edges', () => {
+    const graph = fixture();
+    const users = graph.objects.get(objectKey({ schema: 'auth', name: 'users' }))!;
+    expect(users.createdBy).toEqual([{ program: 'auth/users', statement: 0 }]);
+
+    const intoUsers = graph.incoming.get(objectKey({ schema: 'auth', name: 'users' }))!;
+    const kinds = intoUsers.map(e => `${e.from.program}:${e.kind}`).sort();
+    expect(kinds).toContain('app/posts:fk');
+    expect(kinds).toContain('auth/uid:body');
+  });
+});
+
+describe('objectsInSchemas', () => {
+  it('selects the subsystem objects by schema', () => {
+    const graph = fixture();
+    const dropped = objectsInSchemas(graph, ['auth']);
+    const labels = [...dropped].sort();
+    expect(labels).toContain(objectKey({ schema: 'auth', name: 'users' }));
+    expect(labels).toContain(objectKey({ schema: 'auth', name: 'uid' }));
+    expect(labels).not.toContain(objectKey({ schema: 'app', name: 'posts' }));
+  });
+});
+
+describe('danglingEdges', () => {
+  it('reports surviving references into the dropped set, and only those', () => {
+    const graph = fixture();
+    const dropped = objectsInSchemas(graph, ['auth']);
+    dropped.add(objectKey({ schema: null, name: 'auth' }));
+
+    const dangling = danglingEdges(graph, dropped);
+    const summary = dangling.map(e => `${e.from.program}:${e.kind}`).sort();
+    // auth/uid's body reference to auth.users originates inside the dropped
+    // set, so it must NOT dangle; the FK and the policy accessor call must.
+    expect(summary).toEqual(['app/policy:reference', 'app/posts:fk', 'app/posts:reference']);
+  });
+
+  it('is empty when the referencing statements are dropped too', () => {
+    const graph = programsFrom({
+      a: 'CREATE TABLE auth.users (id uuid PRIMARY KEY);',
+      b: 'CREATE TABLE auth.sessions (uid uuid REFERENCES auth.users (id));'
+    });
+    const dropped = objectsInSchemas(graph, ['auth']);
+    expect(danglingEdges(graph, dropped)).toEqual([]);
+  });
+});
+
+describe('prunablePrograms', () => {
+  it('prunes exactly the programs whose creates are all inside the dropped set', () => {
+    const graph = fixture();
+    const dropped = objectsInSchemas(graph, ['auth']);
+    dropped.add(objectKey({ schema: null, name: 'auth' }));
+    expect(prunablePrograms(graph, dropped).sort()).toEqual([
+      'auth/uid',
+      'auth/users',
+      'schemas/auth'
+    ]);
+  });
+
+  it('keeps mixed programs and programs that create nothing', () => {
+    const graph = programsFrom({
+      mixed: 'CREATE TABLE auth.a (id int); CREATE TABLE app.b (id int);',
+      grants: 'GRANT SELECT ON app.b TO authenticated;'
+    });
+    const dropped = objectsInSchemas(graph, ['auth']);
+    expect(prunablePrograms(graph, dropped)).toEqual([]);
+  });
+});
diff --git a/pgpm/slice/src/index.ts b/pgpm/slice/src/index.ts
index 6b045e642..9a84da45f 100644
--- a/pgpm/slice/src/index.ts
+++ b/pgpm/slice/src/index.ts
@@ -5,3 +5,4 @@ export * from './refs';
 export * from './closure';
 export * from './partition';
 export * from './exclude';
+export * from './object-graph';
diff --git a/pgpm/slice/src/object-graph.ts b/pgpm/slice/src/object-graph.ts
new file mode 100644
index 000000000..0c3873c8f
--- /dev/null
+++ b/pgpm/slice/src/object-graph.ts
@@ -0,0 +1,170 @@
+/**
+ * Unified SQL object graph — the semantic IR over parsed programs.
+ *
+ * Nodes are database objects (keyed by qualified name) with the statements
+ * that create them; edges are the references statements make to objects:
+ * plain references, late-bound PL/pgSQL body references, and foreign-key
+ * targets. Programs are named (typically one per pgpm change), so ownership
+ * queries answer change-level questions directly:
+ *
+ * - which objects live in a schema set (subsystem selection)
+ * - which surviving statements still reach into a dropped object set
+ *   (cascade safety — every in-edge must originate from a statement that is
+ *   itself dropped, or be rebound)
+ * - which programs create nothing outside a dropped set (whole-change
+ *   pruning by ownership, not survivor counting)
+ *
+ * Pure and I/O-free; built from `SqlProgram`s parsed once elsewhere.
+ */
+import type { SqlProgram, StatementFacts } from '@pgpmjs/transform';
+
+import { SqlObjectRef } from './refs';
+
+/** Identifies one statement inside one named program. */
+export interface StatementId {
+  program: string;
+  statement: number;
+}
+
+export type ObjectEdgeKind = 'reference' | 'body' | 'fk';
+
+/** One reference from a statement to an object. */
+export interface ObjectEdge {
+  from: StatementId;
+  /** Key of the referenced object (see `objectKey`). */
+  to: string;
+  kind: ObjectEdgeKind;
+}
+
+/** A database object and the statements that create it. */
+export interface ObjectNode {
+  ref: SqlObjectRef;
+  createdBy: StatementId[];
+}
+
+export interface SqlObjectGraph {
+  /** The named programs the graph was built from. */
+  programs: Map<string, SqlProgram>;
+  /** Objects by key. */
+  objects: Map<string, ObjectNode>;
+  /** All reference edges. */
+  edges: ObjectEdge[];
+  /** Edges into each object, by object key. */
+  incoming: Map<string, ObjectEdge[]>;
+}
+
+export function objectKey(ref: SqlObjectRef): string {
+  return `${ref.schema ?? ''}\u0000${ref.name}`;
+}
+
+export function objectLabel(ref: SqlObjectRef): string {
+  return ref.schema ? `${ref.schema}.${ref.name}` : ref.name;
+}
+
+function statementFacts(program: SqlProgram, index: number): StatementFacts {
+  return program.statements[index].facts;
+}
+
+/**
+ * Build the object graph from named programs (typically change name →
+ * parsed deploy script).
+ */
+export function buildObjectGraph(
+  programs: Map<string, SqlProgram> | Array<[string, SqlProgram]>
+): SqlObjectGraph {
+  const programMap = programs instanceof Map ? programs : new Map(programs);
+  const objects = new Map<string, ObjectNode>();
+  const edges: ObjectEdge[] = [];
+  const incoming = new Map<string, ObjectEdge[]>();
+
+  const addEdge = (edge: ObjectEdge): void => {
+    edges.push(edge);
+    const list = incoming.get(edge.to);
+    if (list) list.push(edge);
+    else incoming.set(edge.to, [edge]);
+  };
+
+  for (const [name, program] of programMap) {
+    program.statements.forEach((stmt, i) => {
+      const id: StatementId = { program: name, statement: i };
+      for (const c of stmt.facts.creates) {
+        const key = objectKey(c);
+        const node = objects.get(key);
+        if (node) node.createdBy.push(id);
+        else objects.set(key, { ref: { schema: c.schema, name: c.name }, createdBy: [id] });
+      }
+      for (const r of stmt.facts.references) {
+        addEdge({ from: id, to: objectKey(r), kind: 'reference' });
+      }
+      for (const r of stmt.facts.bodyReferences) {
+        addEdge({ from: id, to: objectKey(r), kind: 'body' });
+      }
+      for (const t of stmt.facts.fkTargets) {
+        addEdge({ from: id, to: objectKey(t), kind: 'fk' });
+      }
+    });
+  }
+
+  return { programs: programMap, objects, edges, incoming };
+}
+
+/** Keys of every object created in one of the given schemas. */
+export function objectsInSchemas(graph: SqlObjectGraph, schemas: Iterable<string>): Set<string> {
+  const wanted = new Set(schemas);
+  const keys = new Set<string>();
+  for (const [key, node] of graph.objects) {
+    if (node.ref.schema !== null && wanted.has(node.ref.schema)) keys.add(key);
+  }
+  return keys;
+}
+
+/** Statement ids that create at least one object in `dropped`. */
+function droppedStatements(graph: SqlObjectGraph, dropped: Set<string>): Set<string> {
+  const ids = new Set<string>();
+  for (const key of dropped) {
+    const node = graph.objects.get(key);
+    if (!node) continue;
+    for (const id of node.createdBy) ids.add(`${id.program}\u0000${id.statement}`);
+  }
+  return ids;
+}
+
+/**
+ * Edges into `dropped` objects whose source statement is not itself dropped.
+ * Each is a dangling dependency: dropping the object set is safe iff this is
+ * empty or every edge's referenced object is rebound to a replacement.
+ */
+export function danglingEdges(graph: SqlObjectGraph, dropped: Set<string>): ObjectEdge[] {
+  const droppedStmts = droppedStatements(graph, dropped);
+  const dangling: ObjectEdge[] = [];
+  for (const key of dropped) {
+    for (const edge of graph.incoming.get(key) ?? []) {
+      if (!droppedStmts.has(`${edge.from.program}\u0000${edge.from.statement}`)) {
+        dangling.push(edge);
+      }
+    }
+  }
+  return dangling;
+}
+
+/**
+ * Programs every one of whose object-creating statements creates only
+ * `dropped` objects — whole changes owned by the dropped set, prunable from
+ * the plan by ownership (read from the graph, not counted from survivors).
+ * Programs that create nothing are never pruned.
+ */
+export function prunablePrograms(graph: SqlObjectGraph, dropped: Set<string>): string[] {
+  const prunable: string[] = [];
+  for (const [name, program] of graph.programs) {
+    let creating = 0;
+    let insideOnly = true;
+    program.statements.forEach((stmt, i) => {
+      if (stmt.facts.creates.length === 0) return;
+      creating++;
+      const facts = statementFacts(program, i);
+      if (!facts.creates.every(c => dropped.has(objectKey(c)))) insideOnly = false;
+    });
+    if (creating > 0 && insideOnly) prunable.push(name);
+  }
+  return prunable;
+}