OptionalappliedRealm ultimately applied to request-scoped auth context.
OptionalrequestedRealm explicitly requested by the caller, if any.
OptionalscopeWhether payload contents suggest a realm mismatch.
OptionalwarningOptional warning message when scope mismatch is detected.
Scope metadata returned for realm-sensitive executions.