Per-capability spec changes proposed by add-polyfill-connector-system.
The polyfill runtime SHALL reject any RECORD whose key is not in the grant's declared resources set for that stream, if the set is non-empty.