tenant.mismatch

Refused 403 policy

The workspace in the URL is not the one your credentials belong to.

Outcome	Refused, 403
Source	policy: This bus's operational rules (identity, grants, size, idempotency, story ownership). Not a verdict of the SOM standard.
Checked at	Identity (see the order of checks)

What it means

Each credential belongs to one workspace. A request to another workspace's address is refused, even with a valid token.

How to fix it

Publish to the workspace address shown with your credentials, or use the credentials issued for the workspace you meant.

Related rules

• producer.unauthenticated

---

Branch on the rule id, never on the violation's message text. All rules: rule catalogue.