The upgrade verb's compare answers each node's own composition and the assigner's findings, not a policy against the controller's; tokens no longer says whether issuing is on, since no lease gates it; the composed configuration names the grants part, not the controller (ADR 0590). Issue 1126 B1, B3a. Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL