A key-value entry asked in requires (ADR 0595) was bound but never issued as a state, because each reader read the old state list alone (issue 1966). Membership.StateIssued and StateNames, and catalogue.KeptStates, are the one rule the tool runner, the grants part and the manifest validator call. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i