VENDOR_KEY_INVALID
HTTP 400No
Vendor key rejected (empty secret / bad state / ramp ∉ [0,1]).
By default a failed call returns a result with an error instead of throwing, so your business flow is never interrupted.
Published error codes are permanent: their meaning never silently changes, and deprecated codes keep returning for at least 12 months.