The vault takes a value only from the controller, which it knows from the
subject that names its caller. The grant is composed from the records, as
the issued tools' is, so the installer's first user list is unchanged.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>