Interpret authorization, policy, state, adapter, workflow, evidence, and verification failures.

Errors and recovery reference

Class	Meaning	Operator response
Authorization denial	principal lacks tenant/type/action authority	correct membership/admission; do not retry as another claimed actor
`ComplianceBlocked`	policy or governed gate denied execution	resolve the named evidence/state blocker
Schema/state rejection	malformed input or invalid transition	correct the command or current object state
Idempotency conflict	same key reused with different parameters	stop; issue a new logical command only if intent changed
Adapter failure	external analyzer/converter/effect did not complete	follow retry classification and reconciliation evidence
Evidence rejection	producer, run, reference, digest, watermark, or version not admitted	correct the authoritative evidence record
Stale certificate	material dependency changed or waiver expired	revalidate and mint a new certificate
Workflow not found	typed Temporal absence	confirm workflow ID/start status
Temporal/auth outage	operational failure, not absence	restore service/auth; error must propagate
Uncertain cutover	external effect cannot be proven success/failure	remain executing; reconcile from checkpoint and external state

Never turn an operational outage into “not found,” or a failed validation into a warning merely to advance the wave.