The patching module OSHs do their work in the execute(....) method of the OSH registered with the ManagementResourceRegistration. This runs in Stage.MODEL which means the patching work is in MODEL even though it's not about the configuration model stuff that should be the only concern of Stage.MODEL.

Simple fix is to move the logic to an added Stage.RUNTIME step.

This is no big deal except it prevents the WFCORE-2816 fix that would allow the kernel to guard against improper behavior by subsystems.