recovery_principal_isolation· reason_code· applies to authz, device_recoveryA recovery policy or recovery session request targets an AccountId different from the exact account bound to the authenticated SessionGrant. Servers MUST compare both principal_id and station_id and reject without revealing the target account's recovery state.