Parse and verify, never store.

generate

{
  "error": {
    "code": "ILLEGAL_ARTIFACT",
    "message": "generate refuses dl-aamva: generating an AAMVA DL/ID barcode is manufacturing a government-credential artifact — refused at every tier, no override",
    "scheme": "dl-aamva",
    "hint": "parse-and-verify is supported; rendering this artifact is refused by type at every tier"
  }
}

enrich

{
  "error": {
    "code": "policy_refusal",
    "message": "enrich is refused for dl-aamva by registry policy",
    "scheme": "dl-aamva",
    "hint": "the scheme row carries no_retention / enrich: refused as hard flags"
  }
}