The per-instance guard filter — "this instance's guards in one datasource".
The engine's verdict load (verdictGuardsForInstance) fetches it once
against the engine datasource, and guardsForInstance unions it
across datasources for housekeeping; the reactive adapters subscribe the
set-shaped instancesGuardQuery this delegates to (one shared
live query per resource, sliced per sourceInstanceId), so every path
reads through one filter definition. Ordinary stage retraction deletes
guards, so results represent active persisted guard documents.
The per-instance guard filter — "this instance's guards in one datasource". The engine's verdict load (verdictGuardsForInstance) fetches it once against the engine datasource, and guardsForInstance unions it across datasources for housekeeping; the reactive adapters subscribe the set-shaped instancesGuardQuery this delegates to (one shared live query per resource, sliced per
sourceInstanceId), so every path reads through one filter definition. Ordinary stage retraction deletes guards, so results represent active persisted guard documents.