Variable: AUDIT_REFUSAL_REASONS

const AUDIT_REFUSAL_REASONS: readonly ["subject_unreadable", "envelope_invalid", "schema_mismatch", "body_not_json", "record_invalid", "payload_hash_mismatch", "tenant_mismatch", "producer_mismatch", "not_a_producer", "database_refused", "not_canonical"]

Defined in: packages/contracts/src/schemas/audit-actions.ts:348

Why the audit service refused a message it was delivered (09, a refusal leaves a trace). The first nine are the checks of the service's prepare(); the last two are the write path's: the database refused this record, or its bytes were not the RFC 8785 canonical form the chain hashes.