Variable: IDENTIFIER_PUBLISH_DENIAL_REASONS

const IDENTIFIER_PUBLISH_DENIAL_REASONS: readonly ["document-mismatch", "host-unverified", "agent-refused", "host-taken"]

Defined in: packages/contracts/src/schemas/audit-issuance.ts:314

Why a publication was refused, on an identifier.publish record with outcome denied:

• document-mismatch: what the agent signed was not the document that was previewed, so nothing was written (D3.3). A defect in the platform, never the caller's doing;
• host-unverified: the identifier's delegated host does not resolve to this deployment's edge, so nothing was signed and no object was written for the host (the control rule, ruling 1 of the wave 3 hand-out). The caller is answered identifier.host_unverified; an audit enumeration takes hyphens, as IDENTIFIER_FAILURE_REASONS does;
• agent-refused: the agent would not sign the entry, so there was nothing to hold against the preview and nothing was written (step 3.2d). The caller is answered identifier.agent_refused;
• host-taken: another identifier was published on the delegated host first. An unpublished delegated host reserves nothing, so this is found at publication, and the identifier that lost can never be served there (step 3.2d). The caller is answered identifier.host_taken. The record names this identifier only, never the one that holds the host.

document-mismatch, agent-refused and host-unverified under this action are a first publication's: the same failures of an update are recorded as identifier.update denied, with IDENTIFIER_UPDATE_DENIAL_REASONS, and nothing here.

The list only widens, and new reasons go at the end.