36.9. Rejected returns and resolution (e.g., client notification, IP PIN)