package release

// AuthorizationError is a refusal from a caller's Authorize hook. The
// primitives wrap the hook's own error in it so a caller can tell "you may
// not" from a store or ladder failure with errors.As.
//
// The hook runs on a pipeline the primitive has just read (spec
// 2026-10-05-deploy-credential-design.md §7.2): on the ladder's read, on the
// repeat path, and between the pointer read and the conditional write. A
// caller that passes no hook gets no extra reads.
type AuthorizationError struct{ Err error }

func (e *AuthorizationError) Error() string { return e.Err.Error() }
func (e *AuthorizationError) Unwrap() error { return e.Err }