Decline Reason - Credit Score Too Low

I'm having a small disagreement with a business unit. When they auto-decline credit card applications because the credit score is too low, the adverse action notices give the decline reason as "insufficient credit score." I know there is regulatory guidance on this beyond the official staff commentary on Reg B, but I am having brain fade and cannot remember where. Can someone please point me in the right direction?

Thanks!

See 1002.9(b)(2) and its related OSI.

Thanks, Dan.