Not a bridge message at all (no marker) — other postMessage traffic, ignore silently.
Marker present but event.source is not a tracked widget iframe — spoof/stale, drop.
Payload serialized beyond the cap — warn + drop.
Payload could not be JSON-serialized (e.g. undefined / function) — drop.
Why an incoming 'message' event was NOT surfaced as a widget submission.