Interface: RefusalRecord

Refusal Record (RFC-0021). Durable, signed, independently verifiable evidence that a policy decision REJECTED a transaction — the REJECT-path counterpart to ExecutionTrustRecord. At most one RefusalRecord exists per businessTransactionId.

​

Properties

​

refusalRecordId

readonly refusalRecordId: string

---

​

businessTransactionId

readonly businessTransactionId: string

---

​

decision

readonly decision: Decision

---

​

evaluatedIntent

readonly evaluatedIntent: RefusalIntentSnapshot

---

​

bindingViolations?

readonly optional bindingViolations?: readonly RefusalBindingViolation[]

Present only when the rejection came from SignalIntentBinder. Absent (not an empty array) for an ordinary PolicyEngine.evaluate REJECT that never reached binding-violation logic at all.

---

​

submittedBy?

readonly optional submittedBy?: string

Authenticated caller who submitted the rejected request. Absent when caller-auth is disabled.

---

​

policyContentHash?

readonly optional policyContentHash?: string

SHA-256 hash of the policy content that decided the refusal. Absent on Refusal Records written before 2026-10-06.

---

​

refusalRecordHash

readonly refusalRecordHash: string

---

​

signature

readonly signature: Signature

---

​

createdAt

readonly createdAt: Date