Yeah, I'm pretty convinced of this now reading a bit more. The big obvious bug / hole being bootstrap_options.pythonpath: ie if the mutation is to underlying local loose-source plugin code, that will not be caught ... but that appears to have been fixed by the daemon including bootstrap_options.pythonpath in it's

compute_invalidation_globs

.

yep, correct