FLX-4001: declared zone is outside the document's allowed zones
Family: governance/sovereignty (the 4000 band)
World.spec.sovereignty / Simulation.spec.sovereignty (schema $defs/sovereignty) declares the zones a run may execute in. The run's own declared zone -- the --zone flag, falling back to FLUX_ZONE -- was resolved and it is not a member of allowedZones. Under enforcement: block (the default) the run refuses to start; under enforcement: audit it does not, and a lineage-style row is recorded instead.
Look it up offline
$ fluxsim explain FLX-4001
Every code is listed in the error index.