controls

Deny has to mean deny

Framework callbacks observe. A governance contract has to stop the action, including when the guard crashes.