@stg.audit: deny