Stable result codes
The tables below are generated from DenialReason::code() and
Requirement::code() in auths-model. They are checked against the current
source revision during every build.
Denied
Section titled “Denied”Available trustworthy facts established a stable refusal.
| Stable code | Rust variant |
|---|---|
malformed-proof | MalformedProof |
non-canonical-proof | NonCanonicalProof |
resource-limit-exceeded | ResourceLimitExceeded |
digest-mismatch | DigestMismatch |
duplicate-object | DuplicateObject |
missing-reference | MissingReference |
reference-cycle | ReferenceCycle |
ambiguous-terminal-grant | AmbiguousTerminalGrant |
unused-critical-evidence | UnusedCriticalEvidence |
invalid-signature | InvalidSignature |
principal-method-mismatch | PrincipalMethodMismatch |
verification-method-mismatch | VerificationMethodMismatch |
signature-suite-mismatch | SignatureSuiteMismatch |
untrusted-root | UntrustedRoot |
broken-grant-chain | BrokenGrantChain |
delegation-expanded | DelegationExpanded |
permission-not-granted | PermissionNotGranted |
action-constraint-mismatch | ActionConstraintMismatch |
budget-ceiling-exceeded | BudgetCeilingExceeded |
authorization-plan-invalid | AuthorizationPlanInvalid |
composition-requirement-not-met | CompositionRequirementNotMet |
plan-action-mismatch | PlanActionMismatch |
action-body-mismatch | ActionBodyMismatch |
audience-mismatch | AudienceMismatch |
challenge-mismatch | ChallengeMismatch |
action-outside-validity | ActionOutsideValidity |
principal-revoked | PrincipalRevoked |
grant-revoked | GrantRevoked |
status-sequence-rollback | StatusSequenceRollback |
status-method-mismatch | StatusMethodMismatch |
status-issuer-untrusted | StatusIssuerUntrusted |
registry-manifest-mismatch | RegistryManifestMismatch |
verifier-configuration-mismatch | VerifierConfigurationMismatch |
resource-namespace-mismatch | ResourceNamespaceMismatch |
critical-extension-unknown | CriticalExtensionUnknown |
attachment-missing | AttachmentMissing |
attachment-digest-mismatch | AttachmentDigestMismatch |
attachment-length-mismatch | AttachmentLengthMismatch |
duplicate-attachment | DuplicateAttachment |
unused-critical-attachment | UnusedCriticalAttachment |
opaque-attachment-not-allowed | OpaqueAttachmentNotAllowed |
local-policy-denied | LocalPolicyDenied |
Indeterminate
Section titled “Indeterminate”A required trustworthy fact or supported capability was unavailable. Do not execute; obtain the fact or add explicit support before retrying.
| Stable code | Rust variant |
|---|---|
unsupported-protocol | UnsupportedProtocol |
unsupported-principal-method | UnsupportedPrincipalMethod |
unsupported-signature-suite | UnsupportedSignatureSuite |
unsupported-evidence-type | UnsupportedEvidenceType |
unsupported-status-method | UnsupportedStatusMethod |
unsupported-profile | UnsupportedProfile |
unsupported-profile-policy | UnsupportedProfilePolicy |
unsupported-resource-matcher | UnsupportedResourceMatcher |
unsupported-budget-algebra | UnsupportedBudgetAlgebra |
unsupported-critical-extension | UnsupportedCriticalExtension |
unsupported-assurance-claim | UnsupportedAssuranceClaim |
missing-principal-evidence | MissingPrincipalEvidence |
missing-principal-status | MissingPrincipalStatus |
missing-grant-status | MissingGrantStatus |
stale-status | StaleStatus |
historical-state-unavailable | HistoricalStateUnavailable |
assurance-requirement-not-met | AssuranceRequirementNotMet |
external-fact-unavailable | ExternalFactUnavailable |
Authorized
Section titled “Authorized”The success code is exactly authorized.