403
field member: sometimes present
Source: service_error
lib/authz.ts ForbiddenError. Also the shape returned by superadminForbidden() for SuperadminRequiredError, and many inline 403s across routes that haven’t migrated to the service layer yet.