/**
 * Why a plugin outside policy may not add a tool while the organization's
 * MCP allowlist is in force: the setting, then the rule.
 */
export const TOOL_REGISTER_REFUSAL =
  'allowedMcpServers (managed): plugins outside policy may not add tools'