diff --git a/test/integration/mesh.test.ts b/test/integration/mesh.test.ts
index ea878bf..73210ad 100644
--- a/test/integration/mesh.test.ts
+++ b/test/integration/mesh.test.ts
@@ -193,6 +193,20 @@ function bundleFor(images: HeldImage[]): string {
   return foundationBundle(bundle, images);
 }
 
+/**
+ * Put the mesh's composed user list where the anchor's bus reads it, and make it re-read.
+ *
+ * **Genesis's step, done by hand because this bed raises genesis by hand** (novox/hq 04-ISSUES/146).
+ * The bus here is the bundle's, not a module the mesh delivers, so an account the mesh composes —
+ * the enrolment when a token is issued, the node's own when it enrols — reaches it only if whoever
+ * raised it places it. Without this the first join is refused with an authorisation violation.
+ */
+async function composeTheBusUsers(): Promise<void> {
+  await must("anchor",
+    `docker exec mesh-controller /mesh-controller broker accounts > /var/lib/mesh-bus-conf/accounts.conf && ` +
+      `docker kill -s HUP mesh-broker >/dev/null`);
+}
+
 /** Take a token out of what `token issue` printed. It is the one base64url blob on its own line. */
 function tokenFrom(said: string): string {
   const found = said.split("\n").map((l) => l.trim()).find((l) => l.length > 100 && !l.includes(" "));
@@ -311,9 +325,11 @@ test("both machines join it, and the token is all they need", { skip, timeout: 9
   for (const [machine, node] of [["anchor", "anchor"], ["laptop", "laptop"]] as const) {
     await mesh(`node add ${node}`);
     const token = tokenFrom(await mesh(`token issue --node ${node}`));
+    await composeTheBusUsers();
     // No --name. The token says what the mesh calls the machine, which is the fault this walk
     // found the first time it was run.
     const said = await must(machine, `${HOST_PATH} enrol --token ${quote(token)}`);
+    await composeTheBusUsers();
     assert.match(said, new RegExp(`enrolled as ${node}`), said);
     assert.match(said, /sealing key/, "no sealing key was generated");
   }
@@ -1678,6 +1694,7 @@ test("a machine joins through the tunnel, with the bus closed to it", { skip, ti
     assert.equal((await must("joiner", `${HOST_PATH} key 2>/dev/null`)).trim(), key);
 
     const token = tokenFrom(await mesh(`token issue --new joiner --overlay-key ${key}`));
+    await composeTheBusUsers();
     const said = await must("joiner", `${HOST_PATH} enrol --token ${quote(token)}`);
     assert.match(said, /the tunnel to the hub is up/, said);
     assert.match(said, /enrolled as joiner/, said);