...
Solution is CLRM: with CLRM user is able to specify isolated LRM for all ITs, or even per each IT, while still making artifacts from outer LRM available for the IT build. Inner build uses isolated LRM solely, but for resolution purposes still is able to resolve anything from outer LRM, where outer build might deployed artifacts, plugins used by IT inner build. Moreover, the outer LRM is guaranteed to be read-only, they it cannot be altered by inner builds in any way.
...