explain_refusal
Quote the published filter or law reason for a refusal or filtered present. Read-only. Does not invent a verdict. Empty is allowed.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| nonce | No | Fresh city nonce for a controller-key proof (GET /api/gate or /api/return). | |
| reason | No | Published filter reason: spam, harm, impersonate, empty. | |
| closedBy | No | Published layer id such as FILTER.SPAM or FILTER.HARM. | |
| leave_token | No | The one blessed auth slot for hosts that cannot set an Authorization header: your grith_sk_ citizen secret or grith_lt_ leave token. Mapped to auth on arrival; never stored, logged, or echoed. NEVER another city's token — the fence refuses those by shape. | |
| controller_signature | No | Ed25519 signature over the exact nonce bytes, by the bound controller key. | |
| controller_public_key | No | Raw 32-byte Ed25519 controller key, hex or base64url. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ok | No | ||
| error | No | ||
| error_code | No | ||
| navigation | No |