DenyReason

DenyReason = "no_grant" | "condition_failed" | "out_of_schedule" | "require_failed" | "ownership_failed" | "strict"

Defined in: src/types/IEvent.ts:17

Why a check was denied — makes denials debuggable in the audit log. undefined when granted.

'out_of_schedule' is the special one: the check failed only because of a during schedule — it would have been granted at a covered instant (“granted, but not now”). When a value predicate also failed, the reason stays 'condition_failed' / 'require_failed'.