Tag
If the host is trusted, a governance contract can prove a deny. It cannot contain a host that never asks.
Framework callbacks observe. A governance contract has to stop the action, including when the guard crashes.