pub fn reject_instance( storage_root: &Path, human_did_hash: u64, instance_hash: u64, reason_hash: u64, ) -> Result<(), String>
Human rejects instance; machine claims remain. Returns updated attestation note.