producer.not_registered

Refused 403 policy

Valid credentials, but the app has no grants on this bus yet.

Outcome	Refused, 403
Source	policy: This bus's operational rules (identity, grants, size, idempotency, story ownership). Not a verdict of the SOM standard.
Checked at	Identity (see the order of checks)

What it means

The token or AWS signature is valid, but the app it identifies has no active connection here (as a producer, or as a consumer on the pull routes): its connection was revoked, it was never connected, its identity-provider client is not bound to a connection of your organisation, or its AWS role is not registered for the workspace in the URL.

How to fix it

Connect the app in the portal (or ask RND for an RND-managed app). For an AWS role, register it on the connection and complete the verify step; for your own identity provider, bind the client with a fresh token.

Related rules

• producer.unauthenticated
• principal.not_verified
• producer.system_id_not_allowed

---

Branch on the rule id, never on the violation's message text. All rules: rule catalogue.