Tag
If the host is trusted, a governance contract can prove a deny. It cannot contain a host that never asks.