The integration case after created proved only that the binding is in the membership, never that the account can use it (design 25 § 12.7). Under the list the composer writes, the keeper creates mod-c_kept, mod-c's own account binds and writes it, and another module reads nothing of it. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i