A line in postgres's recipe and a one-line file in amqp-ping, both added to move a commit and watch the mesh notice. The proofs worked; neither was meant to stay. MESH_MODULE is set from the sealed credential at run time anyway, so baking it in was dead weight as well as noise.