Every refusal class, A to Z · Saphan Studio documentation

All 191 refusal classes the product declares, each with its family and whether this section explains it yet.

This is the whole declared vocabulary: 191 refusal classes, exactly as this release declares them. saphan refusal-class status lists the same set for the build you have installed. If the product printed a class you cannot find here, the product is ahead of this page — tell us, because that is a gap we want to close.

⚠ Some refusals carry an identifier that is not a declared class. Egress control's run refusals, such as EGRESS-CLOSED-DEFAULT-REFUSED or egress-unavailable, are an example: they are listed on When something is refused, next to the act they belong to, and not here.

Two columns tell you where to go and what you will get there.

explained — the family page states what the refusal means, what causes it and what to do.
named only — the family page confirms the class is real and deliberate and says what its name indicates; the resolution is not written down yet. 145 of the 191 classes are in this state today; they are collected on What is not yet explained.

class	family	this section
`access-log-unwritable`	The record and gates	named only
`actor-near-miss`	Identity and actors	explained
`actor-not-enrolled`	Identity and actors	explained
`actor-registry-absent`	Identity and actors	named only
`actor-registry-unreadable`	Identity and actors	named only
`actor-registry-unwired`	Identity and actors	named only
`actor-retired`	Identity and actors	named only
`artifact-root-inside-repository`	Machines and seats	named only
`artifact-root-not-declared`	Machines and seats	named only
`artifact-root-unmeasured`	Machines and seats	named only
`bridge-commit-refused`	The record and gates	named only
`capture-invalid`	The record and gates	named only
`ceremony-capture-mismatch`	Identity and actors	named only
`ceremony-intermediate-exists`	Identity and actors	named only
`ceremony-readback-self-referential`	Identity and actors	explained
`ceremony-restore-no-presence`	Identity and actors	named only
`ceremony-restore-out-dir`	Identity and actors	named only
`ceremony-restore-pin-mismatch`	Identity and actors	named only
`ceremony-restore-pin-unknown`	Identity and actors	named only
`ceremony-restore-record-mismatch`	Identity and actors	named only
`ceremony-restore-unknown-word`	Identity and actors	named only
`ceremony-restore-word-count`	Identity and actors	named only
`ceremony-root-exists`	Identity and actors	explained
`cert-format-ambiguous`	The console	named only
`cli-backend-not-interactive`	Dispatch and capacity	named only
`cli-binary-unexecutable`	Dispatch and capacity	named only
`cli-binary-unregistered`	Dispatch and capacity	named only
`cli-interactive-flag-conflict`	Dispatch and capacity	named only
`cli-profile-home-unresolved`	Dispatch and capacity	named only
`cli-registry-unreadable`	Dispatch and capacity	named only
`cli-role-mismatch`	Dispatch and capacity	named only
`cli-seat-not-local`	Dispatch and capacity	named only
`cli-seat-retired`	Dispatch and capacity	named only
`cli-seat-unknown`	Dispatch and capacity	named only
`cli-session-record-unreadable`	Dispatch and capacity	named only
`cli-shell-not-installed`	Dispatch and capacity	named only
`closure-collect-incomplete`	The record and gates	named only
`closure-collect-unreadable`	The record and gates	named only
`closure-evidence-not-persisted`	The record and gates	named only
`closure-persist-uncontained`	The record and gates	named only
`closure-persist-unverified`	The record and gates	named only
`closure-place-is-a-main-repository`	The record and gates	named only
`closure-place-not-a-worktree`	The record and gates	named only
`closure-place-not-owned`	The record and gates	named only
`closure-place-unmeasured`	The record and gates	named only
`closure-removal-incomplete`	The record and gates	named only
`closure-removal-refused`	The record and gates	named only
`closure-transport-unreachable`	The record and gates	named only
`config-init-incomplete`	The record and gates	named only
`console-act-decision-not-offered`	The console	explained
`console-act-forgery`	The console	explained
`console-act-no-session-actor`	The console	named only
`console-act-not-a-gate-write`	The console	named only
`console-act-not-offered`	The console	explained
`console-batch-duplicate-stream`	The console	named only
`console-batch-empty`	The console	named only
`console-batch-ground-absent`	The console	named only
`console-batch-no-preview`	The console	named only
`console-batch-unaccounted`	The console	named only
`console-certificate-absent`	The console	named only
`console-certificate-issuer-absent`	The console	named only
`console-certificate-unreadable`	The console	named only
`console-seat-profile-dir-not-derived`	The console	named only
`custody-binary-unsafe`	Identity and actors	explained
`custody-loose-perms`	Identity and actors	named only
`custody-malformed-secret`	Identity and actors	named only
`detach-kernel-port`	Dispatch and capacity	explained
`detach-stdio-conflict`	Dispatch and capacity	explained
`egress-address-denied`	The network path	explained
`egress-auth-unsupported`	The network path	explained
`egress-destination-not-allowed`	The network path	explained
`egress-host-unparseable`	The network path	explained
`egress-limit-handshake-deadline`	The network path	explained
`egress-limit-header-count`	The network path	explained
`egress-limit-idle-deadline`	The network path	explained
`egress-limit-line-length`	The network path	explained
`egress-limit-preface-bytes`	The network path	explained
`egress-limit-total-transfer`	The network path	explained
`egress-literal-not-recorded`	The network path	explained
`egress-method-unsupported`	The network path	explained
`egress-port-not-allowed`	The network path	explained
`egress-protocol-error`	The network path	explained
`egress-record-unavailable`	The network path	explained
`egress-resolve-denied`	The network path	explained
`egress-resolve-failed`	The network path	explained
`egress-sni-mismatch`	The network path	explained
`egress-upstream-unreachable`	The network path	explained
`forge-not-configured`	The record and gates	named only
`gate-integrity`	The record and gates	explained
`gate-is-stale`	The record and gates	named only
`gateway-mtls-listen-not-served`	Dispatch and capacity	named only
`init-collision`	The record and gates	named only
`listen-ambiguous`	Dispatch and capacity	explained
`machine-account-near-miss`	Machines and seats	named only
`machine-account-not-seated`	Machines and seats	named only
`machine-account-value-refused`	Machines and seats	named only
`machine-already-admitted`	Machines and seats	named only
`machine-already-retired`	Machines and seats	named only
`machine-artifact-root-invalid`	Machines and seats	named only
`machine-cert-expired`	Machines and seats	named only
`machine-cert-subject-mismatch`	Machines and seats	explained
`machine-device-cert-not-persisted`	Machines and seats	named only
`machine-device-key-exists`	Machines and seats	explained
`machine-gomodcache-root-invalid`	Machines and seats	named only
`machine-invalid-csr`	Machines and seats	named only
`machine-max-sessions-retired`	Machines and seats	explained
`machine-not-admitted`	Machines and seats	named only
`machine-pin-not-ssh`	Machines and seats	named only
`machine-pin-operator-entry-missing`	Machines and seats	named only
`machine-pin-revoked`	Machines and seats	named only
`machine-pin-ssh-host-missing`	Machines and seats	named only
`machine-price-invalid`	Machines and seats	named only
`machine-price-no-change`	Machines and seats	named only
`machine-renew-no-change`	Machines and seats	named only
`machine-retire-live-run`	Machines and seats	named only
`machine-retire-seated`	Machines and seats	named only
`machine-seat-backend-not-seatable`	Machines and seats	named only
`machine-seat-backend-unknown`	Machines and seats	named only
`machine-seat-billing-class-unknown`	Machines and seats	explained
`machine-seat-cast-path-invalid`	Machines and seats	named only
`machine-seat-config-dir-on-lane-backend`	Machines and seats	named only
`machine-seat-cross-machine-move`	Machines and seats	named only
`machine-seat-lane-on-config-dir-backend`	Machines and seats	named only
`machine-seat-lane-required`	Machines and seats	named only
`machine-seat-profile-shared`	Machines and seats	named only
`machine-seat-role-unknown`	Machines and seats	named only
`machine-seat-slot-occupied`	Machines and seats	named only
`machine-seat-slot-out-of-range`	Machines and seats	named only
`machine-set-binary-invalid-pair`	Machines and seats	named only
`machine-slots-below-seated`	Machines and seats	named only
`machine-slots-invalid`	Machines and seats	named only
`machine-slots-no-change`	Machines and seats	named only
`machine-ssh-host-required`	Machines and seats	explained
`machine-ssh-key-required`	Machines and seats	named only
`machine-ssh-key-unverified`	Machines and seats	named only
`machine-transport-required`	Machines and seats	named only
`machine-unseat-live-run`	Machines and seats	named only
`machine-unseat-not-seated-here`	Machines and seats	named only
`machine-worktrees-root-invalid`	Machines and seats	named only
`memory-carry-refused`	The record and gates	named only
`merge-preconditions`	The record and gates	named only
`merged-tree-does-not-build`	The record and gates	named only
`no-identity`	Identity and actors	named only
`no-workspace`	The record and gates	explained
`order-bytes-truncated`	Documents and contracts	named only
`order-digest-mismatch`	Documents and contracts	named only
`order-expired`	Documents and contracts	named only
`order-ref-ambiguous`	Documents and contracts	named only
`order-revoked`	Documents and contracts	named only
`order-store-not-resolved`	Documents and contracts	explained
`order-superseded`	Documents and contracts	named only
`order-uncommitted`	Documents and contracts	explained
`order-unregistered`	Documents and contracts	explained
`owner-key-absent`	Identity and actors	explained
`owner-presence-absent`	Identity and actors	explained
`owner-presence-unconfirmed`	Identity and actors	explained
`pr-merge-act-failed`	The record and gates	named only
`pr-merge-claimed-by-another-actor`	The record and gates	named only
`pr-merge-in-flight`	The record and gates	named only
`pr-merge-preconditions`	The record and gates	named only
`pr-stale-head`	The record and gates	named only
`pr-unknown`	The record and gates	named only
`result-too-large`	Dispatch and capacity	named only
`routing-refusal`	Dispatch and capacity	named only
`schema-ahead`	Documents and contracts	named only
`schema-behind`	Documents and contracts	named only
`scope-denied`	Identity and actors	named only
`server-cert-key-exists`	Identity and actors	named only
`server-cert-no-san`	Identity and actors	named only
`server-cert-ttl-required`	Identity and actors	named only
`serverd-already-running`	Dispatch and capacity	named only
`session-actor-key-absent`	Identity and actors	named only
`structural-bounce`	The record and gates	named only
`teardown-archive`	The record and gates	named only
`teardown-provisioned-unresolvable`	The record and gates	named only
`teardown-worktree-unknown`	The record and gates	named only
`token-unmapped`	Identity and actors	named only
`toolchain-unavailable`	Dispatch and capacity	named only
`trust-fingerprint-mismatch`	The console	named only
`trust-host-required`	The console	named only
`trust-host-unreachable`	The console	named only
`trust-key-exists`	Identity and actors	named only
`trust-keychain-refused`	The console	named only
`trust-not-macos`	The console	named only
`trust-refused`	Identity and actors	named only
`tunnel-needs-listener`	Dispatch and capacity	explained
`ui-assets-parity`	The console	explained
`unknown-capture`	The record and gates	named only
`unknown-stream`	The record and gates	named only
`unknown-workspace`	The record and gates	named only
`workspace-key-exists`	Identity and actors	explained