fix(field-access-report): reference policy default in denial reason for root fields without explicit rule

[carloseberhardt]

Fix: Reference Policy Default in Denial Reason for Root Fields Without Explicit Rule

Summary

• Denied root fields now reference the policy default and its condition in the reason string when no explicit rule is found.
• Fixes test failure for introspection control policies (issue #113).
• Ensures compliance with expected report output and improves clarity for denied access cases.

---

Details

• Updates the denial reason logic in the field access report generation:

  • When a root field is denied due to the absence of a rule, and a exists, the denial reason now explicitly references the policy default and its condition.
  • Example:

• This change ensures that the field access report is more informative and matches the expectations of the test suite and users.

---

Testing

• All unit tests now pass, including:

• Verified that the generated report for introspection control policies now includes the correct denial reason referencing the policy default.

---

Closes

• Test Failure: Field Access Report - Introspection Control Policies #113

---

Portions of the Content may be generated with the assistance of CursorAI

[ddebrunner]

GTG