propagatesTo
Failures that this failure propagates into. Often cyclic in real safety models (feedback paths), so the source materializer needs to back-patch after both ends exist in the scope — hence var. Compiled-path callers should treat as effectively immutable.