Failure Types
- Identity parse and token-shape failures
- Credential signature, expiry, and binding failures
- Permission and orbit-compatibility denials
- CTS recall, sequence, timing, and stress failures
Severity Levels
Failures are treated with fail-closed semantics for security-critical paths and graded operator actions for recoverable training scenarios.
Containment Strategies
- Stop request progression immediately on parse/auth failure.
- Prevent unauthorized state mutation in downstream gateways.
- Preserve explicit denial reasons for auditability.
Recovery Paths
Recovery paths include credential re-issuance, corrected permission scopes, orbit-compliant rerouting, and CTS remediation retries based on phase outcome.
Telemetry Triggers
Each denial and degraded condition emits telemetry so operators can correlate failure source, impact scope, and remediation progress.
Operator Notifications
Operator-facing alerts prioritize mission-impacting failures and include module context plus explicit policy/credential reason codes.