rejection

Why a wire message, a synced change, or a local request was refused. Also the rejection telemetry attribute.

Value	Meaning
`unknown_version`	The envelope's major version is not `WIRE_MAJOR`.
`malformed`	The bytes are not a canonical CBOR envelope or payload, or are larger than `WIRE_MAX_BYTES`.
`bad_signature`	The envelope or a change has no valid signature by its sender.
`no_capability`	No grant chain authorizes the signer for this document or topic.
`grant_expired`	The grant's window does not contain the change's own time.
`out_of_scope`	The grant does not cover the path or the operation.
`quota_exceeded`	The change comes after its grant's quota among its actor's changes under that grant, in `seq` order.
`unsigned`	A change was not genesis and carried no `ChangeSig`.
`rate_limited`	A per-signer token bucket was empty.
`secret_detected`	The secret scan flagged the change before signing.
`never_sync`	The path is never synced.
`over_limit`	A peer exceeded a per-peer bound on held or joined sync state (`SYNC_HELD_MAX_MESSAGES`, `SYNC_HELD_MAX_BYTES`, `PROJECT_MAX_DOCUMENTS`; decision 111); the peer is disconnected.
`duplicate`	A copy of an envelope already accepted on that topic: a remembered envelope, accepted or with a take outstanding, that came again on a topic it already came on. It is ignored, with no take and no delivery, and never penalized.
`stale`	An envelope whose signed `ts` is more than `GOSSIP_FRESH_MS` from now, the shell's `now_ms`. It is ignored and never penalized.

Cardinality: 14.