The approval unit table's in-memory state held `<node>.act.sha256:<hex>`, a key the live bus
refuses, so the table passed while every marked call failed on the bus. meshtest.State now
refuses a key outside letters, digits and -/_= in dot-separated names, as the bus does, checked
with mesh-sdk's keys.CheckName per name; a row of the refusals table holds it.
Builds: design 46 7-approval-mark §13, §22; lead answer A-209
Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h