Variable: DEFAULT\_GUARDED\_EVENTS

const DEFAULT_GUARDED_EVENTS: readonly ["hold", "confirm", "submit"];

Defined in: server/bookings/policy-guards.ts:74

The lifecycle events a matched rule denies when its domain_config does not name events explicitly: the capacity-ACQUIRING claims. Deliberately excludes cancel/reject/complete/expire — a blackout or lead-time rule must never strand an existing booking by denying its way out; cancellation windows opt in with events: ["cancel"] (§7).

Also excludes transfer — a blackout rule authored to block NEW bookings must not silently block a same-party contact fix or group move (the whole §7.1 family guards under this one event). Consumers who want rules to gate transfers must add events: ["transfer"] to the rule's domain_config.