how to add a new Credential/policy

[Roua-acs]

Hello,
i created a new claim DataSensitiveCredential DataSensitive.level eq yes i implemented it like the DataProcessorCredential
the idea is to let the consumer access the asset with that claim however i am facing these issues .

when i create a policy with that constraint and link it to an asset (provider side ) and then try to initiate a negotiation (consumer) it get stuck in REQUESTED Status

i am getting such error

kubectl -n mvd logs deploy/provider-qna-controlplane --since=5m |
grep -E "DataSensitiveLevelFunction|PolicyEvaluationExtension|ContractNegotiation"
INFO 2025-09-04T13:29:18.990276502 PolicyEvaluationExtension: registered rule for DataSensitive.level
DEBUG 2025-09-04T13:29:18.990695846 Initialized org.eclipse.edc.demo.dcp.policy.PolicyEvaluationExtension
DEBUG 2025-09-04T13:29:20.134983415 Initialized org.eclipse.edc.connector.controlplane.store.sql.contractnegotiation.SqlContractNegotiationStoreExtension
DEBUG 2025-09-04T13:29:20.144640793 Initialized org.eclipse.edc.connector.controlplane.contract.ContractNegotiationDefaultServicesExtension
DEBUG 2025-09-04T13:29:22.209647538 Prepared org.eclipse.edc.demo.dcp.policy.PolicyEvaluationExtension
DEBUG 2025-09-04T13:29:22.21367685 Prepared org.eclipse.edc.connector.controlplane.store.sql.contractnegotiation.SqlContractNegotiationStoreExtension
DEBUG 2025-09-04T13:29:22.213882627 Prepared org.eclipse.edc.connector.controlplane.contract.ContractNegotiationDefaultServicesExtension
DEBUG 2025-09-04T13:29:22.286544317 Started org.eclipse.edc.demo.dcp.policy.PolicyEvaluationExtension
DEBUG 2025-09-04T13:29:26.167575283 Started org.eclipse.edc.connector.controlplane.store.sql.contractnegotiation.SqlContractNegotiationStoreExtension
DEBUG 2025-09-04T13:29:26.167676209 Started org.eclipse.edc.connector.controlplane.contract.ContractNegotiationDefaultServicesExtension
DEBUG 2025-09-04T13:30:48.392227556 DSP: Incoming ContractRequestMessage for class org.eclipse.edc.connector.controlplane.contract.spi.types.negotiation.ContractNegotiation process
INFO 2025-09-04T13:30:48.515503905 DataSensitiveLevelFunction: invoked (op=EQ, right=yes)
DEBUG 2025-09-04T13:30:48.56627857 [PROVIDER] ContractNegotiation d17eead5-08b0-4ece-9d47-6839b578dae2 is now in state REQUESTED.
DEBUG 2025-09-04T13:30:48.725096988 [ProviderContractNegotiationManagerImpl] ContractNegotiation d17eead5-08b0-4ece-9d47-6839b578dae2 is now in state AGREEING
SEVERE 2025-09-04T13:30:49.037456905 ContractNegotiation: ID d17eead5-08b0-4ece-9d47-6839b578dae2. Attempt #1 failed to [Provider] send agreement. Fatal error occurred. Cause: {"@type":"dspace:ContractNegotiationError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}
DEBUG 2025-09-04T13:30:49.060966654 [ProviderContractNegotiationManagerImpl] ContractNegotiation d17eead5-08b0-4ece-9d47-6839b578dae2 is now in state TERMINATING. errorDetail: Failed to send agreement to consumer: {"@type":"dspace:ContractNegotiationError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}
SEVERE 2025-09-04T13:30:50.071584024 ContractNegotiation: ID d17eead5-08b0-4ece-9d47-6839b578dae2. Attempt #1 failed to [PROVIDER] send termination. Fatal error occurred. Cause: {"@type":"dspace:ContractNegotiationError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}
DEBUG 2025-09-04T13:30:50.07700666 [ProviderContractNegotiationManagerImpl] ContractNegotiation d17eead5-08b0-4ece-9d47-6839b578dae2 is now in state TERMINATED. errorDetail: Failed to send termination to counter party: {"@type":"dspace:ContractNegotiationError","dspace:code":"401","dspace:reason":"Unauthorized","@context":{"dcat":"http://www.w3.org/ns/dcat#","dct":"http://purl.org/dc/terms/","odrl":"http://www.w3.org/ns/odrl/2/","dspace":"https://w3id.org/dspace/v0.8/","@vocab":"https://w3id.org/edc/v0.0.1/ns/","edc":"https://w3id.org/edc/v0.0.1/ns/"}}

it does already work for the DataProcessorCredential but not for the credential than i implemented. am i missing something ?
is there an idea about how to fix this ?