Module refusal 

Stable refusal classifications emitted by operator-facing command surfaces.

The token spellings are a machine contract. This vocabulary is closed (only the variants below are accepted) and append-only: variants may be added, but an existing token must never be renamed or reused for a different meaning.

Enums

RefusalReason

Stable reason attached to a refused kkernel exec invocation or operation.