The grants part's real-bus test gains a case: the tool runner's composed account hears a module's event, a module stream's and a restricted stream's whose grant names no tool runner, still after that grant changes and the accounts are composed again; it publishes none, hears no accept or proof, and gets no consumer or acknowledgement on the restricted stream. Builds: design 34 every-event §9, §27 Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h