command v0.9 carries ConsentGrant and OperationId: consent happens once, and identity is compared
rather than spelled. This package does not use them yet; capping the atom is what stops anything
downstream from resolving a version that does.

Widening only, and the suite runs against the new atom.