The BinaryStateChangesValidator work here revealed that the raw bytes externalized for keys into state id 9 ("TokenService.TOKEN_RELS") do not match the bytes put into the VirtualMap because EntityIDPair uses (AccountID, TokenID) and TokenAssociation uses (TokenID, AccountID).