A zero trust policy allows the service token and the backend still returns 403

The edge grants access, yet the application rejects the call because it expects a human identity field that machine traffic does not provide.