which SP when signature validation fails?

[Cantor, Scott]

> I don't think the audit log contains random things that might fail that show
> up in the process log?

A properly adjusted audit log should flag any failure of outcome at this point. "Why it failed" is what the process log is meant to be for, if it isn't obvious from the audit record.

Things like metadata failing is more of a status/monitoring thing, and that's metrics. 

-- Scott