Keep the builds of the grants step's machine alone, not of every machine its composition resolves (repo-check of #230)

Composing the bus's machine resolves the others on the same context, and a machine never recorded as sent refused the whole composition.
2026-10-11 19:30:10 +02:00
parent 0f853e93fa
commit 325575b292
5 changed files with 35 additions and 18 deletions
@@ -1238,7 +1238,7 @@ func sendToEach(ctx context.Context, open *stores, names []string) ([]string, er
 		numbered.stamp(&declared)
 		// **The grants step sends the user list and nothing else** (novox/hq issue 490): judged on this very
 		// declaration, the one sent, so nothing composed between a check and the send can slip through.
-		if everyBuildKept(ctx) {
+		if everyBuildKept(ctx, name) {
 			other, err := grantsOnlyIn(ctx, open, name, plan, declared)
 			if err != nil {
 				return nil, err