NodeCanHaveTag, TagExists, ViaRoutesForPeer checked pm.pol before taking pm.mu, racing SetPolicy's write (caught by -race in TestRaceConcurrentServerMutations). DebugString read pol, filter, and the derived maps with no lock at all.