انتقل إلى المحتوى الرئيسي

Type Alias: DenyReason

DenyReason = Exclude<AccessDenyReasonV2, "scope_denied" | "principal_unknown" | "issuer_not_accepted">

Defined in: packages/messaging/src/ports.ts:51

Why a message was refused. Each is an access.deny audit candidate, recorded as a version 2 payload (AccessDenyReasonV2, slice 2 D2.2). scope_denied and principal_unknown are recorded by the service's own checks, and issuer_not_accepted by the gateway's route check (D1.4); never by the receiver.

  • tenant_mismatch: the subject's tenant token is not the actor's (D8), or it is a literal *.
  • schema_mismatch: the envelope declares a schema other than the subject's key.
  • unlisted_edge: the caller is not listed against the key in the permission table, or the envelope names a callerModule the carrier cannot vouch for (any on the broker; one other than the wiring's caller in process).
  • actor_unverified: the envelope did not decode, the actor may not carry the root path, or the minter refused it.
  • actor_token_invalid: a token the message needs is missing, or it is forged, expired, signed by a key not held, signed by a gateway that is not a listed caller of the key, or bound to another message, subject or actor.
  • platform_grant_missing: a platform actor arrived and no caller holds the grant for this key.