A resource composed in code carries restart-on as []string; the rename only read []any, so the overlay's registry-trust reload kept its bare reference, pointed at nothing, and the runtime was never restarted — the trust was on disk and not in the daemon, with every check passing. Diagnosed on the built-store-cross-node bed, run 8 (issues 042/048).