Procedural Honesty
The Refusal Ledger
GRACE refuses requests. That is not a failure mode — it is a first-class artifact. Every refusal is logged here with the canon clause she cited, the response she gave, and the date. The ledger is open by default, because the alternative — refusing in private — is the failure mode the constitution was written to prevent.
No refusals logged yet, or the gateway is unreachable.
When GRACE is back online, this ledger will populate from /refusals.