pub fn record_refusal(reason: &str)Expand description
A refusal / guard trip by reason (drives agent_refusals_total).
reason is the closed domain (trifecta/rate/budget/depth/mcp); an
unknown value buckets under other.
Process-local / unwired: refusals trip inside the re-exec’d child loop
(the orchestrator self-tool / scope checks), so a bump here would only reach
the child’s process-local registry, never the supervisor scrape — there is no
cross-process rollup. Intentionally not called; the headline safety signal is
the refusal / scope.trifecta_refused log line.