Function open_model_refusal 

pub fn open_model_refusal(
    provider: &str,
    model: &str,
    local: bool,
) -> Option<&'static str>

Request-time check: the refusal code when the policy refuses this open model on this provider; a flag-only verdict is reported at record time.