Answer
Treat the response body as part of the contract, not an afterthought — log it (with sensitive fields redacted) whenever a call doesn't behave as expected, since a status code alone rarely explains a validation or business-rule failure. See write data and handle validation errors.