PE5 — DENY through a REAL provider. The AI Agent provider must (a) refuse a domain-wide check
(resourceId = null) rather than answering for "all agents", and (b) deny every action on a
resource id that has no grant rows at all. This is the closed-by-default half of the two-path
contract, asserted directly on the provider rather than through the aggregator.
PE5 — DENY through a REAL provider. The AI Agent provider must (a) refuse a domain-wide check (
resourceId = null) rather than answering for "all agents", and (b) deny every action on a resource id that has no grant rows at all. This is the closed-by-default half of the two-path contract, asserted directly on the provider rather than through the aggregator.