Canonical checked failures returned by application-owned handlers and typedoutbound ports on either endpoint side.
Every payload is a host-authored, already-sanitized string meant for theclient to display: the adapter forwards it verbatim onto the JSON-RPC error(message plus data), so a user can read — and share with a developer —what actually happened. Handlers must not put secrets, raw payloads, orstack traces in these strings.