ARC0019: Contradictory authorization

What

A class or method has both @allowAnonymous() and @roles() or @authorize(). Rule: arc-core/arc0019.

Why

Arc rejects conflicting authorization. A class-level restriction overridden by a method-level anonymous declaration is a different, supported case.

Bad

@allowAnonymous()
@roles('Admin')
export class Register { handle() {} }

Good

@roles('Admin')
export class Register { handle() {} }