Variable: AccessDenyPayloadV1

const AccessDenyPayloadV1: TObject<{ messageId: TString; reason: TUnsafe<"tenant_mismatch" | "schema_mismatch" | "unlisted_edge" | "actor_unverified" | "platform_grant_missing" | "scope_denied" | "principal_unknown" | "issuer_not_accepted">; schema: TString; }>

Defined in: packages/contracts/src/schemas/audit-actions.ts:110

The version 1 access.deny payload, exactly as slice 1 wrote it: no version field, eight reasons. Still accepted, because records in this shape exist and the audit service must keep appending what a producer not yet redeployed sends.