CHW-4833 HardeningApprovalInvalid
the multi-key approval nonce is not valid — see the approval.reason field for the specific sub-reason (missing, expired, unsigned, self_signed, wrong_cluster, already_consumed)
Default message: the multi-key approval nonce is not valid — see the approval.reason field for the specific sub-reason (missing, expired, unsigned, self_signed, wrong_cluster, already_consumed)
HTTP status:409(client)
Problem. POST /api/hardening/bundle (with
override.approval_nonce) or one of the /api/hardening/approval/*
endpoints rejected a multi-key approval nonce. Cause. The nonce
shape is well-formed but state prevents it from succeeding (expired,
already consumed, mismatched signers, or insufficient quorum). The
response body’s sub-reason field names which precondition failed.
Fix. Mint a fresh approval nonce per
Signed policy bundles.
HTTP 409.