Review of L2, round 2: a refusal at the first compose after a start keeps what the module's have said runs (1); each have of a self-composing node carries the values its composition holds sealed, and the composer reuses them after a restart, so a rotated secret moves no composition at a restart (2); pin mesh-sdk dd9d9d5 (issue 1126, ADR 0547 §3)

internal/link/have.go

@@ -333,6 +333,7 @@ func (q *Session) writeHaves(ctx context.Context, bus Bus) {
 		case f.Failed:
 			h.Phase = delivery.PhaseFailed
 		}
+		h.Sealed = f.Sealed
 		h.Health = s.healthOf(module, f)
 		if w, ok := s.userList[module]; ok {
 			h.UserList = &w

internal/link/messages.go

@@ -746,4 +746,6 @@ type ModuleFact struct {
 	// Judgement and Waits are, in phase waiting-yes, the judgement of the move and the composition waiting (ADR 0547 §3).
 	Judgement string
 	Waits     string
+	// Sealed is the values the composition it names carries sealed to this node's key (delivery.Have.Sealed).
+	Sealed []string
 }