Bulk

Runs the single-monitor logic one id at a time; one failure never stops the rest. Every id goes through _owned, which also enforces a monitor-scoped member's allowed ids (others answer "not found").