Duh, this is exactly what you explain in the commit message.  I get it now - the chef-client runs are happening with different states :-)