UPSTREAM

The collected flow itself failed, which ends it. The pump is over — nothing will be consumed from this flow again, and whatever the pump maintained is frozen at its last value.

This is the half no onEach-body guard can see, and the reason pumpIn is one call rather than a guarded-launch helper someone composes with a .catch they have to remember (#1788).