Every refusal happens before the first write: format, checksums, key policy, then target inspection. A unique index that will not build aborts, because the unique indexes here are tenant-isolation properties rather than optimisations.
