Outcomes (PASS / WARN / BLOCK)

ASG returns one of three outcomes. Your application must treat the outcome as **binding**.

ASG is **fail-closed by design**. If a decision cannot be safely obtained or verified, execution must stop.

PASS

• Execution is allowed.
• Execute the action exactly once using idempotency_key.
• Persist decision_id for audit.

WARN

• You must not execute yet.
• Persist decision_id.
• Route the decision to a human approval flow.
• Resume execution only after approval is recorded.

WARN requires human approval.

Approval does not modify policies and does not change the original decision — it authorizes execution for this specific decision_id.

BLOCK

• You must not execute.
• Persist decision_id.
• Fix the cause and re-submit. BLOCK is non-recoverable without changing the request (for example missing/invalid context or an unsupported action contract).

Fail-closed rule

If you cannot safely obtain a decision (timeouts, networking failures, or unexpected errors), you must stop and treat it like BLOCK.