grant_revoked_upstream· reason_code· applies to auth_decision, state_resolutionA child grant or Event depends on a parent grant that is locally known to be revoked, superseded, expired, or tombstoned. Reducers MUST fail closed immediately. See zh/authz/capabilities.md §10.3.