appVouchesForBackend tested `ownership !== 'host-ledger'`, so a backend object that never had its ownership established (the field was optional; untyped .mjs callers can build one) received the ancestry waiver. The waiver's premise is ancestry, so it must be stated: localBackendProcess now returns a BackendProcess whose `ownership` is required, and the waiver requires `=== 'child'`.