One statement the gate must refuse.
Optional
The ad hoc path's own refusal when its expression validator refuses first; otherwise the path wraps Reason.
Why the read-only check refuses it, as the check words it; for a forbidden call, the function names.
One statement the gate must refuse.