The node-engine's live path holds a module whose claim or credential fails (issue 1966, review round 1)

compose.CompositionsHolding returns the modules the declaration leaves out for a claim that cannot be held or a refused
credential; frombus composeEach holds each with those words, so the node-engine keeps what it handed of the module (no
stop of a running module), the candidate answer and the check's sandbox name it refused, and the rest composes.
CredentialsNeeded asks nothing for a held module. Resolve and checkClaims move to a test helper (production uses
ResolveHolding and holdClaims); a pass refused anyway names a held module's reason among the others.

Quick fix: Declared.Held read in the composer only. Thorough, chosen: the same held words reach every reader of the
composition (selfcompose, ComposeSent, the candidate answer) through composeEach's one hold path.

Claude-Session: https://claude.ai/code/session_01NcbgfFfQ4Z9UE5jK32PmE5

internal/compose/node.go

@@ -37,6 +37,9 @@ type Declared struct {
 	// ADR 0163, rule 6), sorted; LeftOutWhy is why each was.
 	LeftOut    []string
 	LeftOutWhy map[string]string
+	// Held is, of those, each module left out because its claim cannot be held or its credential was refused, and why (issue
+	// 1966): the node keeps what runs of it and the composer says it held. Not on the wire.
+	Held map[string]string
 
 	// Not on the wire:
 	Received map[string]map[string][]catalogue.Contribution
@@ -199,7 +202,7 @@ func (c *composer) declaration(nodeName string, mode Mode) (Declared, error) {
 	if err != nil {
 		return Declared{}, err
 	}
-	out := Declared{Resources: composed.Resources, Adoption: adoptionFor(plan, node, composed),
+	out := Declared{Held: resolved.Held, Resources: composed.Resources, Adoption: adoptionFor(plan, node, composed),
 		Received: composed.Received, Mesh: with.Mesh, BusUsers: with.BusUsers,
 		LeftOut: sortedKeysOf(composed.LeftOut), LeftOutWhy: composed.LeftOut,
 		Withheld: rendered.Withheld, Unbound: rendered.Unbound,