The MINT-path precondition: throws a GENERIC Error — the programmer-error
contract, since a client never reaches a mint with a bad tenant — when
tenantId fails TENANT_ID_PATTERN or names a RESERVED_TENANT_IDS
identity. Deliberately NOT a TenantResolutionError: createTenantResolver owns
that request-facing 403 contract; the mints are internal. Shared by every
salted-id mint (runIds and memory ids).
The MINT-path precondition: throws a GENERIC Error — the programmer-error contract, since a client never reaches a mint with a bad tenant — when
tenantIdfails TENANT_ID_PATTERN or names a RESERVED_TENANT_IDS identity. Deliberately NOT a TenantResolutionError: createTenantResolver owns that request-facing 403 contract; the mints are internal. Shared by every salted-id mint (runIds and memory ids).