Handle failures without opening the boundary.

Typed errors

from quasentra import (
    ApprovalRequired,
    SecurityDenied,
    ConfigurationError,
    QuasentraTransportError,
)

try:
    agent.invoke(request)
except SecurityDenied as error:
    log_block(error.reason_code)
except ApprovalRequired as error:
    queue_review(error.approval_id)

Error classes

• SecurityDenied: policy blocked the operation.
• ApprovalRequired: exact operation awaits review.
• ConfigurationError: invalid URL, key or settings.
• PermissionConfigurationError: permissions do not match discovered tools.
• QuasentraHTTPError: service error after retry.
• QuasentraTransportError: service unreachable after retry.

Safe failure behavior

Do not catch these errors and run the original tool anyway. Show a safe user message, record the request ID, and let an operator review the dashboard.