Type Alias: GrantVerdict

type GrantVerdict = 
  | {
  allowed: true;
}
  | {
  allowed: false;
  reason: string;
};

Defined in: server/access/grant-service.ts:79

The non-throwing verdict the create gate reaches. checkGrantAllowed returns it, assertGrantAllowed throws it, and checkCreateGrant / listGrantableRoles hand it to callers — so an authoring UI can ask what create will accept instead of reimplementing the gate and drifting.