Fix: Reference Policy Default in Denial Reason for Root Fields Without Explicit Rule

Summary

• Denied root fields now reference the policy default and its condition in the reason string when no explicit rule is found.
• Fixes test failure for introspection control policies (issue #113).
• Ensures compliance with expected report output and improves clarity for denied access cases.

Details

• Updates the denial reason logic in the field access report generation:

  • When a root field is denied due to the absence of a rule, and a exists, the denial reason now explicitly references the policy default and its condition.
  • Example:

• This change ensures that the field access report is more informative and matches the expectations of the test suite and users.

Testing

• All unit tests now pass, including:

• Verified that the generated report for introspection control policies now includes the correct denial reason referencing the policy default.

Closes

• Test Failure: Field Access Report - Introspection Control Policies #113

Portions of the Content may be generated with the assistance of CursorAI