PASS sa-fragment: whole model and 2 exact reachable sources; only unique fresh role IDs borrowed