Constant TOOL_DENIED_KEY 

pub const TOOL_DENIED_KEY: &'static str;

Written when the governed flow refuses a tool call: {"tool": name, "id": call id, "reason": why}.