decktalk check reports it when it judges the project’s files before a build.
Pass --allow PROGRAM_NAMED to carry on past it, and --fail-on to choose which severity fails a run.
What to do
Read the program before you allow it. Allow it for one run withdecktalk build --no-spend --set record.programs=run, or be asked each run after decktalk config set record.programs ask --scope machine.
Troubleshooting says more under A program the project names.