Refusals — Ablative docs

A refusal names what stopped an operation. Read its message, path, resource and receipt alongside the name. The groups below cover CLI commands, the service, MCP, the door and Studio. Related names share an explanation and next act.

Service answers carry a code and message. MCP tool refusals carry isError: true; the stdio process can still exit successfully. For an uncertain write, preserve the request id and exact original change. Read its receipt before repeating it. A different request id can apply the change twice. Printed query rows can be incomplete.

Writing

version_conflict, conflict, request_conflict, record_changed, record_exists: The version or saved state changed. Read it and resolve the difference.
request_id_reused: The id belongs to different content. Recover its receipt; use a new id for new work.
unknown_change_kind, invalid_mutation, invalid_document, invalid_document_content, json_text_invalid, invalid_identifier, invalid_prefix, edge_key, edge_properties, vector_key: The change, JSON, identifier or key is invalid. Correct the named field.
collection_missing, document_missing, edge_endpoint_missing, relation_missing: A required collection, document, endpoint or declaration is absent. Create it at the intended selection.
relation_collection, relation_cardinality: The edge violates declared collections or cardinality. Correct endpoints or remove the conflicting edge.
index_already_declared, index_field_not_top_level, index_vector_field: The index exists or its field is unsuitable. Check its declaration; use a top-level non-vector field.
vector_dimension, vector_dimension_missing, vector_empty, vector_non_finite, vector_field_embedded, vector_field_supplied: Vector dimensions, values or ownership are invalid. Match the declaration and its embedding policy.
append_prune_key_exists, append_prune_key_would_be_removed, append_prune_vector_field: The retention key exists, would be pruned, or uses vectors. Change the key or operation.
append_prune_document_id_invalid, append_prune_scope_component_invalid, append_prune_scope_components_invalid, append_prune_suffix_invalid: Retention identifiers are invalid. Use one to eight non-empty scope components, without separators or NUL.
append_prune_keep_ceiling_zero, append_prune_keep_limit, append_prune_keep_zero, append_prune_limit_overflow, append_prune_removal_cap_too_small, append_prune_removal_cap_zero, append_prune_preparation_required: Retention bounds or preparation are invalid. Match the ceiling, allow two removals and use bounded preparation.
invalid_dependency, dependency_kind_not_admitted: The dependency interval is invalid or unsupported. Correct it or choose a supported change.
import_duplicate, import_empty, import_limit_required: The import is empty, repeats ids or omits its bound. Correct the batch and limit.
draft_limit, not_json, field_json_invalid, field_json_key_exists, no_id, no_name, page_exists, template_exists: Studio needs valid JSON, unique names or a smaller draft. Correct the highlighted input.
already_run, not_offered: The action already ran or is unavailable. Read its outcome and current declaration.
action_log_failed: The action log failed. Read the operation receipt before repeating the action.
contract_refused: The change violates its contract. Correct the named contract condition.
command_not_offered, invalid_command, invalid_config, invalid_context, invalid_op, invalid_text: The assistant command, config, context or text is invalid or unavailable. Correct the named operation using advertised capabilities.

Querying

unknown_method, invalid_operation, invalid_params, method_refused, route_unknown, mcp_tool_unknown, rpc_unknown_method: The operation is unknown or unsupported. Use the served schema and required arguments.
mcp_arguments_invalid, rpc_batch_unsupported, rpc_invalid_id, rpc_invalid_params, rpc_invalid_request, rpc_not_object, rpc_parse_error, mcp_cursor_unsupported, mcp_tasks_unsupported: The MCP envelope or feature is unsupported. Send one valid request using advertised methods.
query_parse, query_compile, query_flag, query_pattern, query_match_pattern, query_match_binding, query_field_unknown, query_function_refused, query_percentile_range, query_parameters_invalid, query_parameter_reserved, query_stage_not_available: The query syntax, binding, parameter or stage is invalid. Correct the named expression.
query_runtime, query_protocol, query_measure_mismatch, query_search_record_missing, query_read_failed, query_stopped: Evaluation, protocol, search input or reading failed. Treat partial rows as incomplete; correct the cause.
invalid_continuation, query_continuation_format, query_continuation_invalid, query_continuation_moment, mcp_cursor_invalid, mcp_version_required, graph_filter_changed, changes_version_required: Pagination lost its selection or filter. Reuse the captured version and cursor, or restart.
query_window_bound, query_window_history_clock, query_window_history_limit, query_window_history_missing, query_window_history_released, query_window_instant, query_window_reversed, query_window_revision: The history window is invalid or unavailable. Correct its interval and use retained, ordered versions.
query_moment_gone, changes_moment_gone, version_released, unknown_version, record_version_not_found: The version is no longer retained. Select a retained version or restore a stopped backup.
document_after_outside_prefix, changes_branch_mismatch, changes_fork_as_to, changes_fork_missing, changes_shards_differ, diff_cursor: The page or comparison selections disagree. Use matching prefixes, compatible shards and recorded selections.
graph_collection_unknown, graph_record_unknown, graph_relation_unknown, graph_member_name, edge_not_found, record_not_found, point_not_found: The graph resource, member or record is absent or unnamed. Check the captured version.
embed_not_configured, embed_field_not_declared, embed_companion_not_served, embed_rewalk_not_ready, embed_search_not_ready, embed_search_unbounded: Text search lacks configuration, a declaration, completed walk or bound. Complete the missing setup.
embed_input_refused, embed_input_empty, embed_input_too_large, embed_request_empty, embed_request_too_large, embed_question_length, text_longer_than_model, windows_over_cap, embed_batch_too_large: Embedding input is empty or oversized. Reduce it or use the declared long-text policy.
embed_model_change_not_available, embed_model_mixed, embed_model_pinned_mismatch, embed_model_mismatch, embed_model_missing, embed_manifest_invalid: The model is missing or differs from its pinned identity. Restore the matching model and declaration.
embed_page_outside_walk, embed_page_stale_text, embed_position_ahead, embed_position_backwards, embed_walk_backwards, embed_walk_open, embed_walk_released, embed_walk_stalled: The embedding page or walk disagrees with saved progress. Resume from a valid confirmed position.
meaning_count_invalid, meaning_field_missing, meaning_record_changed, meaning_record_missing, meaning_request_invalid, meaning_version_changed, meaning_words_missing, no_vector, not_a_vector: Meaning search input is missing or changed. Select the current record, declared field and valid text or vector.
search_count_invalid, search_measure_unknown, search_shut_invalid: Search count, measure or boundary inclusion is invalid. Correct those controls.
address_unreadable, answer_unreadable, graph_address_invalid, graph_hierarchy_invalid, graph_member_unreadable, graph_page_unreadable, graph_query_page_unreadable, schema_unreadable, record_unreadable, version_unreadable: Studio cannot decode the address, schema or answer. Preserve the diagnostic; reload a valid selection.
flag_required, list_required, object_required, text_required, setting_invalid, field_drawing_setting_invalid, graph_event_handler_invalid, graph_lod_input_invalid, graph_style_invalid, unknown_surface_kind, view_missing, return_missing: A Studio arrangement, drawing or setting is invalid. Correct the named control or saved arrangement.
graph_paint_failed, page_stuck, value_view_readers_disagree, value_view_setting_invalid, value_view_unsupported: Studio cannot safely display the result. Preserve the source value; correct settings or use raw view.
library_default_invalid, library_default_missing, library_default_unused, library_editor_missing, library_editor_read_only, library_invalid, library_name_invalid, library_page_unreadable, library_selection_required, library_version_missing: The query library is invalid, unavailable, read-only or unselected. Check the named entry and retained version.
question_missing, question_store_mismatch, question_unsaved: The question is missing, unsaved or belongs elsewhere. Select the matching store and save it.
hello_pending, max_frame_unknown: The greeting or frame bound is pending. Restore the connection before querying.
file_unknown, store_unknown: The door does not serve that file or store. Use a configured store and served route.

Branches and merge

branch_missing, branch_unknown, unknown_branch, reference_missing, version_missing, revision_missing, version_required: The branch, reference or version is missing. Read the catalogue and supply a retained selection.
branch_absent, branch_exists, branch_name_unplaceable, main_protected, rename_roots_differ: The branch names, protected main or roots prevent renaming or creation. Inspect both references.
branch_live, generation_empty, generation_marked, version_generation_ended: The generation cannot be dated as requested. Inspect its rows and existing discard marker.
fork_provenance_missing, parent_generation_changed, parent_sequence_regressed: The recorded ancestry no longer supports review. Capture current inputs and regenerate the comparison.
merge_self, merge_source_moved, merge_target_moved, merge_target_mismatch, merge_pins_moved, merge_identity_conflict, merge_holder_conflict: Merge inputs or identity changed. Read held versions and restart review against the intended inputs.
merge_missing, merge_abandoned, merge_holder_missing, merge_hold_refused, merge_write_refused: The merge or held inputs are unavailable or refused. Read status and receipts before advancing.
choice_conflict, choice_depends_on_endpoint, choice_journal_moved, choice_kind_mismatch, choice_missing, choice_not_needed, choice_owner_unsupported, choice_requires_remove_edge, choice_same_on_both, choice_token_invalid, choice_token_mismatch: The choice is missing, stale or unsuitable. Read its owner and token; resolve endpoints before edges.
choice_identity_length, choice_revision_exhausted, candidate_page_exhausted, candidate_page_budget, candidate_vector_rebuild_required: Candidate progress exceeds bounds or requires vector validation. Reduce the batch or resolve vectors.
candidate_marker_missing, candidate_reference_missing, candidate_provision_refused, candidate_write_refused: Candidate progress or publication is unavailable. Inspect its marker, reference and receipt before advancing.
candidate_restart_unknown, merge_release_unknown, discard_abort_failed, discard_target_mismatch, discard_conflict, discard_pending, counts_discard_pending, counts_merge_pending: Merge or discard is incomplete, mismatched or uncertain. Read status and receipts before releasing inputs.
follow_closed, follow_wrong_branch: Head following stopped or names another branch. Reconnect to the intended branch.
branch_busy, pending_unreadable: Studio has an unresolved write. Preserve the draft and recover its receipt before writing.
named_view_branch_mismatch, named_view_delete_unknown, named_view_key_invalid, named_view_limit, named_view_limit_invalid, named_view_newer_version, named_view_no_pending, named_view_open_invalid, named_view_page_invalid, named_view_receipt_mismatch, named_view_retry_exhausted, named_view_retry_invalid, named_view_save_busy, named_view_save_pending, named_view_scope_invalid, named_view_scope_mismatch, named_view_too_large, named_view_unreadable, named_view_write_unknown: The saved view is invalid, changed, pending or uncertain. Read its record and receipt; preserve unsaved edits.
keeper_key_invalid, keeper_newer_version, keeper_quiet_invalid, keeper_receipt_mismatch, keeper_record_removed, keeper_record_unreadable, keeper_retry_exhausted, keeper_retry_invalid, keeper_scope_mismatch, keeper_source_invalid, keeper_workspace_too_large, keeper_write_unknown: Workspace persistence is invalid or unconfirmed. Preserve local edits; inspect the saved record, scope and receipt.
preference_not_kept, preference_unreadable, preference_unseen: The preference is unreadable or unconfirmed. Check its saved value before repeating.
query_history_limit_invalid, query_history_scope_invalid, query_history_unreadable, question_save_unconfirmed, question_session_limit, question_session_limit_invalid, question_state_unknown: Question history is invalid, full or unconfirmed. Preserve the question; check its scope and saved record.
config_failed, config_request_absent, invalid_session, permission_session_differs, permission_session_invalid, replay_session_differs, session_failed, session_list_id_invalid, session_list_invalid, session_new_id_differs_from_permission, session_new_id_missing, session_replay_id_differs, session_request_absent, stream_session_differs, stream_update_kind_missing, turn_absent, turn_failed: The assistant session, replay, turn or configuration response is invalid or changed. Reconcile its session and pending operation before continuing.

pass_missing, mcp_sign_in_required, haematite_mcp_no_pass: No pass was supplied. Sign in through Lys and present the resulting pass.
pass_expired, pass_not_yet_valid, session_expired, session_unknown, session_unreadable, sign_in_state_unknown, sign_in_state_conflict, sign_in_state_refused: The pass, session or sign-in state is invalid or mistimed. Check the clock and sign in again.
wrong_audience, wrong_issuer, unpublished_key, signature_refused, pass_encoding_refused, rights_outside_audience, rights_truncated: Pass identity, signature, encoding or rights failed verification. Obtain a fresh pass for this store.
permission_refused, merge_access_refused, discard_access_refused: The database grant is missing. Obtain the required read, query or write right from an authorised owner.
lys_keys_pending, lys_keys_unavailable, lys_could_not_be_asked, lys_refused, sign_in_refused, mcp_lys_unreachable, mcp_lys_pass_refused, mcp_pass_refused: Lys keys or issuance failed. Inspect the issuer refusal and restore reachability before signing in.
mcp_pass_unreadable, mcp_pass_unwritten, mcp_lys_answer_invalid, mcp_lys_credential_unreadable, mcp_lys_key_unreadable, mcp_lys_nonce_unavailable, credential_environment_refused: The pass file, proof or secure credential handling failed. Correct its source without printing credentials.
lys_origin_required, endpoint_refused, origin_refused, mcp_http_origin_refused: The issuer endpoint or origin is refused. Use the configured secure origin and permitted callback.
schema_drift, schema_refused, bundle_lys_schema_refused, lys_schema_unchecked: The schema differs, was refused or unchecked. Run lys-schema with authorised credentials; lys_schema_unchecked is a warning.
held_for_approval, draft_acknowledgment_failed, draft_execution_failed, draft_not_a_change, draft_target_differs, draft_words_invalid: The draft needs approval or failed validation, execution or acknowledgement. Inspect its draft and receipt; application may have occurred.
sign_out_refused: Sign-out was refused. Read the issuer response and check whether the session remains active.
embed_rewalk_access_refused: The pass cannot rewalk this field. Obtain the required database grant.
bundle_no_pass: The bundle has no configured agent proof. This is a warning; configure the caller’s proof before using a protected store.
assistant_needs_lys, assistant_issuer_invalid, assistant_lys_answer_invalid, assistant_lys_pass_refused, assistant_lys_unreachable, authentication_required: The assistant lacks a valid launch identity or store pass. Correct its Lys proof, issuer or authentication response.
decision_person_missing, person_mismatch, invalid_decision, draft_unknown: The decision lacks the matching person, valid choice or pending draft. Read the exact draft before deciding it.
permission_issuer_refused, permission_issuer_response_invalid, permission_issuer_response_unreadable, permission_issuer_unreachable, permission_not_held, permission_pass_audience_differs, permission_pass_holder_differs, permission_pass_missing: Lys did not establish the required permission hold or matching pass. Preserve the draft and diagnostic; do not approve locally.
permission_option_duplicate_or_unnamed, permission_option_id_invalid, permission_option_kind_invalid, permission_options_empty, permission_params_invalid_or_exceed_content_bytes, permission_session_or_title_invalid, permission_title_missing: The harness permission request is invalid or oversized. Correct its session, title and offered options; no approval is sent.

Lys can forward additional issuer names. Read that issuer’s message through the reported Lys refusal. Sign-in and permissions explains the required grants.

Limits and busy

busy, embed_busy, query_busy, mcp_http_busy, mcp_http_connection_busy, busy_pending_signins, embed_admission_wait_exceeded: The worker, request slots or sign-in queue is full. Repeat after capacity becomes available.
page_limit, limit_overflow, request_too_large, response_limit, rpc_frame_too_large, mcp_page_bytes_exceeded, mcp_page_bytes_unrepresentable, mcp_page_rows_unrepresentable, mcp_frame_cap_unrepresentable, receipt_frame_limit: The request, response, page or frame exceeds bounds. Reduce its size within configured limits.
query_limit, query_memory_limit, query_output_limit, query_scan_limit, query_time_limit, query_value_too_large, import_limit: The query or import exhausted its bound. Narrow input or paginate; partial rows remain incomplete.
access_scan_limit, changes_node_budget, changes_row_too_large, changes_scan_limit, coverage_budget, dependency_bound, diff_budget, node_budget, node_budget_too_small, review_page_limit_overflow, scan_allowance: The graph, change or review allowance is insufficient. Narrow the selection or increase its bounded allowance.
graph_edge_bytes, graph_members_bound, graph_node_bytes, graph_records_bound, graph_records_bytes, graph_unrelated_bound: The graph selection or item exceeds its bound. Request fewer members, smaller records or pages.
embed_page_records_overflow, embed_page_retry_clock, embed_page_too_large, embed_limits, embed_windows_invalid, embed_workers_none, embed_writer_wait_invalid: Embedding page, worker or wait bounds are invalid. Correct them and resume confirmed progress.
read_timeout, value_view_character_limit, value_view_depth_limit: Studio reached its wait or display bound. Reduce the result; a display timeout does not cancel writes.
release_limit_exceeded: The release exceeds retention.release_max_rows. Lower its row limit and inspect the next result.
assistant_lys_response_exceeds_issuer_response_bytes_or_unreadable, issuer_response_bytes_exceeded, permission_envelope_exceeds_content_bytes, permission_words_exceed_content_bytes, content_bytes_exceeded, session_id_exceeds_content_bytes, stream_envelope_exceeds_content_bytes: The assistant input, permission envelope or issuer answer exceeds its bound. Reduce the input or correct the declared allowance.
pending_permissions_full, prompt_queue_full, replay_stream_queue_full, door_write_queue_full_or_closed, stream_queue_full_or_closed, config_busy, session_busy: The assistant queue is full, closed or occupied by another operation. Preserve the request and read its pending outcome.
assistant_seat_already_running: Another assistant owns this seat’s revocation lock. Confirm its owner and exit before launching the same seat again.

Storage and recovery

durability_unknown, outcome_unknown, mcp_client_outcome_unknown, partial_commit, committed_unpublished, embed_durability_unknown, history_row_durability_unknown: Application or publication is uncertain or partial. Recover the original receipt before repeating.
write_refused, storage, storage_unavailable, writer_unavailable, access_unavailable, catalogue_unavailable, store_writer_unsupported: Storage or its writer failed. Preserve the cause and receipt; inspect a stopped copy.
query_engine_unavailable, query_engine_mismatch, query_worker_missing, query_worker_not_executable, query_worker_not_file, query_worker_path_invalid, query_worker_path_unreadable, query_worker_provenance_missing, query_worker_identity_mismatch, query_worker_not_ready, query_worker_owner_failed, query_worker_start_memory_limit, query_worker_start_timeout, query_worker_stop_failed, query_worker_diagnostic_failed, query_clock, query_seal_unavailable: The query worker, configuration or clock failed. Restore the matching installed worker and complete configuration.
embed_worker_starting, embed_worker_restarting, embed_unavailable, embed_worker_missing, embed_worker_not_executable, embed_worker_not_file, embed_worker_not_ready, embed_worker_owner_failed, embed_worker_start_timeout, embed_worker_exited, embed_worker_exited_before_ready, embed_worker_protocol, embed_worker_refused_late, embed_worker_vectors_invalid, embed_worker_failed, embed_inference_failed, embed_output_invalid, embed_protocol, embed_thread_ended, embed_thread_unended, embed_thread_unstarted, embed_write_refused: The embedding worker is starting, unavailable or failed. Inspect readiness and model diagnostics; resume confirmed progress.
mcp_config_invalid, mcp_config_read_failed, mcp_http_config_invalid, mcp_socket_cap_unavailable: MCP configuration or socket discovery failed. Correct the named file and confirm store readiness.
mcp_http_accept_invalid, mcp_http_body_refused, mcp_http_content_type_invalid, mcp_http_expect_unsupported, mcp_http_header_unreadable, mcp_http_headers_invalid, mcp_http_headers_too_large, mcp_http_length_invalid, mcp_http_length_required, mcp_http_method_unsupported, mcp_http_protocol_version_unsupported, mcp_http_route_missing, mcp_http_transfer_encoding_refused: The HTTP request is malformed or unsupported. Use MCP POST, accepted headers and bounded Content-Length.
door_not_reached, mcp_store_unavailable, mcp_http_dispatch_failed, mcp_http_listener_failed, mcp_http_socket_failed, mcp_http_thread_failed, mcp_http_close_failed, mcp_http_linger_unreadable, mcp_http_write_failed, mcp_http_write_timeout, mcp_input_read_failed, mcp_output_write_failed, receipt_connection_failed, receipt_delivery_failed, receipt_output_failed, client_spawn_failed, socket_clone_failed: Connection or delivery failed. Restore reachability; recover sent writes through receipts before repeating.
mcp_client_request_encoding_failed, mcp_cursor_encoding_failed, mcp_http_encoding_failed, mcp_response_encoding_failed, mcp_result_encoding_failed, mcp_service_answer_invalid, mcp_service_snapshot_mismatch, rpc_result_encoding_failed, rpc_result_not_object, answer_shape, hello_required, receipt_frame_decode_failed, receipt_frame_too_small, receipt_hello_encode_failed, receipt_protocol_mismatch, receipt_refusal_missing, typed_receipt_capability_missing: Encoding, greeting, protocol or answer validation failed. Preserve diagnostics and use compatible versions; recover uncertain writes.
skill_generation_failed, skill_query_cursor_invalid, skill_query_marker_invalid, skill_query_tool_missing, mcp_review_owner_invalid, mcp_counts_unavailable: MCP skill, review or counts description failed. Correct the named schema or captured selection.
bundle_arguments_invalid, bundle_config_invalid, bundle_destination_invalid, bundle_inventory_invalid, bundle_manifest_invalid, bundle_path_invalid, bundle_payload_invalid, bundle_plan_invalid, bundle_plugin_invalid, bundle_source_invalid, bundle_source_changed, bundle_conflict: Bundle inputs or destination disagree. Inspect the plan; use valid sources and an empty or identical destination.
bundle_cleanup_failed, bundle_encoding_failed, bundle_publish_failed, bundle_read_failed, bundle_report_write_failed, bundle_size_overflow, bundle_sync_failed, bundle_write_failed: Bundle I/O or publication failed. Preserve partial output; correct the filesystem cause and verify the manifest.
haematite_mcp_agent_proof_missing, haematite_mcp_binary_missing, haematite_mcp_config_missing, haematite_mcp_issuer_missing: The launcher lacks a binary, config, issuer or proof. Correct the named environment variable.
assistant_unexpected_argument, seat_config_required, seat_invalid, seat_paths_must_be_absolute, seat_store_and_issuer_required, seat_unreadable, session_resume_not_offered: The assistant invocation, seat file or session is invalid. Correct the argument, absolute path or capability.
invalid_data_dir, invalid_runtime_location, invalid_socket, invalid_store_name, endpoint_too_long, directory_exists, data_dir_changed, name_owner_probe_failed: The store path, socket, name or creation target is invalid. Verify the intended directory before starting.
invalid_registry_entry, registry_cleanup_failed, registry_publication_failed, registry_unavailable, runtime_cleanup_failed, runtime_location_unavailable, runtime_uid_unavailable: The private runtime or registry failed. Correct its ownership, location or filesystem error.
release_crashed, release_decision_mismatch, release_decision_unfinished, release_discards_unread, release_files_unremoved, release_kept_untrimmed, release_storage_poisoned, release_thread_ended, release_thread_killed, release_thread_unstarted, reclaim_activation_failed: Release or reclaim is unfinished. Preserve pins and decisions; inspect status and its storage cause.
export_changed, export_incomplete, export_stopped, export_cleanup_failed, export_version_unsupported, unreadable_file, csv_key_collision: Studio export or import failed or is incomplete. Preserve the original; use a complete supported export with unique keys.
receipt_allocation_failed, receipt_corrupt, receipt_count_mismatch, receipt_decode_failed, receipt_digest_mismatch, receipt_encode_failed, receipt_extent_mismatch, receipt_extent_overflow, receipt_fragment_sequence, receipt_hex_invalid, receipt_index_overflow, receipt_read_key_hex_invalid, receipt_request_id_mismatch, receipt_utf8_invalid, stored_envelope_corrupt, stored_envelope_format_unsupported, stored_envelope_payload_invalid, stored_envelope_pointer_invalid, stored_envelope_pointer_missing, stored_envelope_request_kind, stored_fingerprint_format_unsupported, stored_receipt_corrupt, stored_receipt_format_unsupported, vector_envelope_dimensions_invalid, vector_envelope_header_invalid, vector_envelope_header_missing, vector_envelope_non_finite, vector_envelope_tail_invalid: Stored receipt or envelope validation failed. Preserve bytes and request id; inspect a stopped copy before recovery.
change_record_collection, change_record_corrupt, change_record_count, change_record_duplicate, change_record_format_unsupported, change_record_key_invalid, change_record_key_mismatch, change_record_retention, change_record_too_large, change_record_version_limit: Change attribution violates its contract. Correct input; preserve stored records when corruption is reported.
collection_corrupt, corrupt_key, count_overflow, count_underflow, counts_access_refused, counts_branch_missing, counts_corrupt, counts_scan_refused, edge_index_inconsistent, index_declaration_corrupt, relation_corrupt, vector_corrupt, vector_count_overflow, vector_declaration_corrupt, vector_dimension_corrupt: Stored counts, keys, declarations or indexes disagree. Preserve diagnostics; verify a stopped copy before recovery.
append_prune_revision_missing, changes_body_missing, changes_key_corrupt, changes_revision_corrupt, dead_generation_corrupt, document_revision_missing, generation_mismatch, history_check_lock_unreadable, history_check_not_served, history_check_refs_unreadable, history_check_render, history_check_row_unreadable, history_check_service_shard_missing, history_check_store_in_use, history_check_store_unreadable, history_check_usage, history_marker_corrupt, history_ref_corrupt, history_row_conflict, history_row_corrupt, history_row_write_refused, history_rows_count_overflow, history_rows_incomplete, history_service_kind, incomplete_roots, kept_root_unavailable, kept_row_invalid, kept_row_missing, kept_service_invalid: History or retained roots are unavailable or inconsistent. Preserve history files and mismatch counts; inspect a stopped copy.
candidate_marker_corrupt, choice_row_corrupt, discard_intent_corrupt, discard_record_corrupt, discard_ref_corrupt, discard_rows_incomplete, discard_service_invalid, merge_corrupt, merge_holder_corrupt, merge_row_corrupt: Stored merge, choice or discard state is invalid. Preserve its journal and held inputs; inspect a stopped copy.
embed_position_corrupt, embed_position_key_corrupt, embed_positions_page, embed_record_id_corrupt, embed_tag_short, embed_vector_count, embed_vector_key_corrupt, embed_vector_length, scan_key_outside, scan_page: Embedding position, vector or scan state is invalid. Preserve the selection; inspect storage before rebuilding.
inconsistent_diff, review_no_progress, read_hold_refused, service_missing, service_record_unreadable, placement_invalid, route_unclassified, injected_crash, not_served: A service invariant or read hold failed. Preserve the diagnostic and receipt; inspect a stopped copy.
door_poisoned, door_random_unavailable, sequence_exhausted, release_decision_corrupt: The door, random source, sequence space or release decision cannot advance. Preserve diagnostics; investigate before recovery.
Client command exits: 0: answered. 1: preparation or connection failed before sending. 2: refused, for codes this client knows. A write refusal it doesn't know exits 3 even when nothing was applied; read its receipt. Read-only calls return 2 for service refusals. Only write names a request id on standard error. Query rows may be incomplete.
MCP adapters and pass helper exits: 1: adapter, arguments or helper failed. Stdio mcp exits 0 at normal input end despite tool refusals. Inspect each result; never print pass-helper output.
history-check exits: 0: all legacy files matched, possibly zero files. 1: mismatches. 2: refused. Read file and mismatch counts.
observe-get exits: 0: committed bytes returned. 1: absent key. 2: refused. Check the encoded key and format.
Offline maintenance exits: 0: requested operation completed, including dry runs. 1: failed. Inspect partial progress; successful planning does not prove application.
Repository launcher exits: 78: configuration, issuer or proof missing. 127: executable absent. Correct the named variable or installed path.
Configuration decode errors: Unknown or missing fields, wrong types or invalid bounds refuse startup. Correct the named configuration field.
Writer lock held: A writer holds the lock. Stop its owner and verify exit before offline work. Leave writer.lock intact.
WAL absent, corrupt or unreconciled: The WAL is missing, corrupt or incomplete. Preserve existing data; use supported recovery, never manual trimming. Empty never-booted shards can be materialised by a supported writer.
Metadata missing, unsettled or unattested: A pin source is missing, unsettled or unattested. Restore its metadata and resolve publication; attest only complete durability claims.
Unresolvable mark root or node hash mismatch: A retained root lacks nodes or a node hash differs. Restore verified data before sweeping.
Migration fence or unsupported format: Resume or abort the matching migration; preserve its fence. Restore this store’s config.json. Use compatible binaries; never lower format_version.
Unsupported durability: The filesystem lacks required directory-entry durability. Use a supported local Unix filesystem; report-only stats remains available.
bundle_lys_agent_incomplete, bundle_lys_agent_invalid, bundle_lys_key_invalid: The bundle agent options are incomplete or invalid. Supply issuer, agent id and a regular key file together.
pi_mcp_unavailable: The pi adapter drops MCP servers. Choose a harness that carries the configured MCP connection.
assistant_socket_owner_differs, assistant_socket_requires_owner_and_mode_0600: The assistant socket is not owner-only or its peer has another uid. Correct the socket owner, type and mode.
acp_config_response_invalid, acp_notification_not_advertised, acp_request_id_exhausted, acp_response_id_unknown, acp_writer_closed, acp_writer_panicked, acp_written_receipts_closed, assistant_door_closed, assistant_door_refused, assistant_door_welcome_invalid, conversation_sequence_exhausted, door_frame_bytes_exceeded, door_frame_invalid_json, door_frame_missing_newline, door_frame_requires_object, door_link_absent, door_op_id_invalid, door_op_invalid, door_writer_closed, door_writer_panicked, publisher_closed, publisher_panicked: The assistant protocol, frame, id or I/O task failed. Preserve the diagnostic and pending receipts before restarting its connection.
permission_answer_already_queued, permission_answer_not_delivered, permission_answer_request_unknown, permission_draft_id_invalid, permission_draft_id_reused, permission_hold_request_unknown, permission_hold_worker_failed, permission_request_id_already_pending, permission_written_receipt_unknown: Permission tracking or delivery is inconsistent. Preserve the draft and harness response state; confirm delivery before treating a decision as answered.
harness_refused: The harness refused the prompt. Read its numeric error code and message before submitting another turn.
assistant_startup_worker_failed, door_flush_failed, door_flush_receiver_closed: The assistant startup or final output flush failed. Preserve its diagnostic and pending receipts before restarting.
assistant_revoke_refused, assistant_revoke_response_exceeds_bound_or_unreadable, assistant_revoke_unreachable, revoke_agent_invalid, revoke_marker_bound_overflow, revoke_marker_exceeds_bound, revoke_marker_invalid, revoke_marker_parent_absent, revoke_marker_requires_owner_and_mode_0600, revoke_proof_invalid, revoke_worker_failed, seat_config_name_absent: Assistant revocation or its private marker failed validation or delivery. Preserve the marker and correct the named cause before another launch.

Backup, restore and migration gives the stopped-copy procedure. Diagnostics lists library names carried in a storage failure’s cause.

Coverage

The census scans 813 tracked production files at 84b9497a, excluding tests and progress labels. It extracts constructors, name mappings, worker enums, Studio and launcher diagnostics, and the HTTP sign-in list. The current scan finds 1065 names. These two references place them and three historical names exactly once, retaining every name from the earlier 951-name census. Run the check from the Haematite repository:

python3 docs/site/_data/refusal-census.py --check

The meanings are source-derived. The recorded scratch runs exercised common refusals and recovery paths; they did not inject every corruption, resource exhaustion or I/O failure.