onPolicyFailure

How a policy-resolver failure (a policy-store outage or misconfiguration) is handled, bound from ihawu.on-policy-failure (mask-all / fail-request). Defaults to ResolverErrorMode.MASK_ALL — mask the whole resource fail-closed and return 200. ResolverErrorMode.FAIL_REQUEST instead lets the error surface (a 5xx), so an outage is not silent — see ADR 0011 for the committed-response caveat. Only the resolver-error path is affected; a missing principal always masks fail-closed.