Texts the mesh shows say a held stream and consumer only ever gain (issue 1921)

Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i

modules/mesh-grants/internal/grants/assertions.go

@@ -40,7 +40,7 @@ type Limits struct {
 }
 
 // Assertion is one module's declared buckets, logs and streams, composed and compared. Asserted says this pass created
-// one the bus lacked (the operator, 2026-10-26 08:54); one the bus holds is never changed.
+// one the bus lacked (the operator, 2026-10-26 08:54); one the bus holds only ever gains subjects.
 type Assertion struct {
 	Module   string `json:"module"`
 	Manifest string `json:"manifest"`
@@ -54,7 +54,7 @@ const ShadowAsserts = "in the tools: composed and compared, nothing asserted (th
 
 // CreatesMissing is what an assertion of the part's process says (the operator, 2026-10-26 08:54; issue 1790).
 const CreatesMissing = "a bucket, log or stream the manifest declares and the bus lacks is created with the manifest's limits, once per " +
-	"manifest; one the bus holds is never changed or deleted, a difference is only said"
+	"manifest; a stream the bus holds only ever gains the subjects its manifest adds, and nothing is removed, deleted or otherwise changed, a difference is only said"
 
 // Creator creates one stream the bus does not hold, with the configuration given, and never updates or deletes one: the
 // part's process alone, whose account is granted the create of each declared stream by name (the operator, 2026-10-26

modules/mesh-grants/internal/grants/consumers.go

@@ -17,7 +17,7 @@ import (
 // **The durable consumers an account needs** (novox/hq ADR 0561 §6, issue 774): a module's consumer on EVENTS and each
 // process's on its work queue. Since the controller ended by its unassignment (ADR 0590, issue 1126) the grants part
 // alone creates them, with the configuration the bus composer derives (buscompose.AccountConsumers), only where the bus
-// lacks one; one the bus holds is never changed or deleted by a pass, a difference is only said.
+// lacks one; one the bus holds only ever gains the filters its module's consumes adds (never loses one or changes another setting, never deleted by a pass), any other difference is only said.
 
 // ConsumerCreator creates one durable consumer the bus does not hold: the part's process alone, whose account is granted
 // the create of each account's consumer by stream and name. One the bus holds answers ErrHeld.