Refusal return contract: pin the fragment, carry the attempt id, document it #7
2026-11-08
Refusal return contract: pin the fragment, carry the attempt id, document it
The consent_refused page's return link is tested for heimdall_status, heimdall_error, heimdall_refused_by and no completion code, for both a decline and a provider access_denied. A browser_completion refusal now carries heimdall_attempt_id. The contract for app authors is in the consent doc. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>