Module reject_policy 

What Lite does with a locally-originated op Origin refuses.

Origin’s inbound array path returns one ArrayRejectMsg per refused frame. Each reason has one fixed ArrayRejectClass, and the class decides the op’s fate:

Class	Reasons	Disposition
SchemaRequired	ArrayUnknown, SchemaTooNew	RejectDisposition::ResendSchema
CatchUp	RetentionFloor	RejectDisposition::CatchUp
Permanent	ShapeInvalid, EngineRefused, PermissionDenied	RejectDisposition::Drop
Transient	EngineUnavailable, SnapshotCapacity, SnapshotBufferLost	RejectDisposition::Park
Reauthenticate	Unauthenticated	RejectDisposition::Park

A transient reject applied nothing, so the op stays durable and the next session re-sends it. Origin deduplicates a re-sent op by its HLC. An unauthenticated session ends with a fresh handshake, and the next session re-sends the op.

Enums

RejectDisposition

The fate of a locally-originated op Origin refused.

Functions

reject_disposition

Map a reject reason to its disposition.