pub fn for_denial(denial: &DenialContext) -> Vec<Remediation>Expand description
Suggestions that would lift denial, most specific first.
Empty for reasons with no configuration channel — a size cap or a capability gate is not fixed by editing the allowlist, and offering a host to add there would be actively misleading.