The case in the assigner's whole-module test serves the tools bundle's first-view tools as the runtime of its own does, with the callers its manifest writes, while the assigner still waits on the indexer: the grants part, the tool runner and the indexer each get theirs, every other account (the assigner's own included) is refused (ADR 0621 §1-§3). Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig