ADR 0437 §4's check: the three manifests, copied from mesh-delivery's main, are composed through Users and PermissionsFor; each may do what it declares and is refused another module's bucket, another module's name and a seat's verb subject.