fix/genesis-lets-the-control-plane-state-its-facts
main
A mesh raised from nothing must be able to say what it applied and what a machine refused (novox/hq ADR 0134), and the first user list is what permits it. Kept in step with the controller's own composition by the test that reads this file.