Variable: AccessDenyPayloadV2

const AccessDenyPayloadV2: TObject<{ messageId: TString; reason: TUnsafe<"tenant_mismatch" | "schema_mismatch" | "unlisted_edge" | "actor_unverified" | "platform_grant_missing" | "scope_denied" | "principal_unknown" | "issuer_not_accepted" | "actor_token_invalid">; schema: TString; version: TLiteral<2>; }>

Defined in: packages/contracts/src/schemas/audit-actions.ts:132

The version 2 access.deny payload: version: 2 and the nine reasons. The version is inside the payload, so it is covered by payloadHash and travels with the reason it qualifies; a v1 payload is told apart by having none. Producers emit this from slice 2 (step 2.4).