fix(net): the route node's feeder is built from origin-wide state only

quest/m2/cluster-routing/routes/README.md

@@ -543,7 +543,6 @@ benchmarks.
 - [Route layer acceptance](/quest/m2/cluster-routing/routes/acceptance.md) - forwarding fixtures ported and the model deleted, incident fixtures, end-to-end checks, and benchmarks
 - [Firefox tabs prove their route key](/quest/m2/cluster-routing/routes/browser-proof.md) - a current Firefox tab opens a lite-07 session with a route-key proof the relay verifies, once neqo's exporter follows the draft
 - [Playwright bundles Chromium's spec exporter](/quest/m2/cluster-routing/routes/playwright-pin.md) - the toolchain's Playwright bundles Chromium 158+, so the route key lane proves the Chromium tab
-- [The route node behaves the same whoever creates it](/quest/m2/cluster-routing/routes/node-creation-order.md) - creating an origin's lite-07 route node from SETUP instead of the route layer changes nothing observable
 
 ## Related
 

rs/moq-net/src/model/origin.rs

@@ -7327,23 +7327,33 @@ impl Consumer {
 	}
 
 	fn create_route_node(&self) -> (crate::route::Node, std::sync::Weak<std::sync::Mutex<OwnClaims>>) {
-		// The whole table, whatever this handle's scope, counted against no session.
-		let own = |upstream| {
-			Self {
-				scope: OriginScope::default(),
-				root: Path::default(),
-				horizon: Horizon {
-					node: NodeFilter::Own,
-					upstream,
-					..Horizon::default()
-				},
-				covering: false,
-				stats: stats::Session::default(),
-				..self.clone()
-			}
-			.with_hidden(true)
-			// Feeding the node is no reason to ask any peer about anything.
-			.serving()
+		// The whole table, counted against no session: only origin-wide state, so the node
+		// is the same whichever handle creates it. No `..self` here, so a new per-handle
+		// field cannot leak in.
+		let own = |upstream| Self {
+			hop: self.hop,
+			max_hops: self.max_hops,
+			scope: OriginScope::default(),
+			root: Path::default(),
+			shared: self.shared.clone(),
+			stats: stats::Session::default(),
+			horizon: Horizon {
+				node: NodeFilter::Own,
+				upstream,
+				..Horizon::default()
+			},
+			hidden: Hidden {
+				include: true,
+				from: None,
+			},
+			// Feeding the node is no reason to ask any peer about anything, as when serving.
+			covering: true,
+			interested: false,
+			proxy: false,
+			pool: self.pool.clone(),
+			cache_duration: self.cache_duration,
+			tasks: self.tasks.clone(),
+			timers: self.timers.clone(),
 		};
 		// Built before taking the lock, since opening a cursor takes it.
 		let node = crate::route::Node::origin(self.hop());
@@ -10710,11 +10720,17 @@ mod tests {
 	}
 
 	/// A route node already fed by its driver still answers a new stream with the table as
-	/// it stands, including a claim announced since the driver last ran.
+	/// it stands, including a claim announced since the driver last ran, whichever handle
+	/// created it: one scoped away from the claim, upstream, proxying, and hiding hidden
+	/// routes sees the whole table all the same.
 	#[test]
 	fn the_route_node_answers_with_the_table_as_it_stands() {
 		let producer = origin(1).produce();
-		producer.route_node();
+		(producer.clone().with_link(Link::Upstream).with_proxy(true).consume())
+			.scope("elsewhere", &Patterns::from(Pattern::all()))
+			.unwrap()
+			.with_hidden(false)
+			.route_node();
 		// Nothing polls this test's driver.
 		let _shown = producer.announce("room/alice", RouteInfo::new()).unwrap();
 		let link = crate::route::Link {