Type Alias: AccessDenyHook
AccessDenyHook = (
denial) =>void|Promise<void>
Defined in: packages/messaging/src/ports.ts:95
The call point for refusal-time audit (access.deny). A refusal that is not
recorded is indistinguishable from one that never happened. This package only
calls the hook; packages/audit-client (S10) supplies the implementation.
The hook is awaited. If it rejects, the refusal STANDS and the failure is logged: a broken audit path must never turn a denial into an allow.
Parameters
denial
Returns
void | Promise<void>