pub const TOKEN_SCOPE_RULE: &str = "token-scope";
What the evaluation log names, where a policy’s row names the policy, for a write refused because its token’s scope does not cover it.