Cause

HMAC signature does not match the expected payload.

Partner action

Verify the connect_secret used and the payload format (slug.external_id.ts).

Gando action (internal)

Check signature validation logic in partner-connect-signing.ts.