Screen Recording API 403 on BYOC Trunk Sessions

Anyone know why the screen recording API returns a 403 Forbidden error when querying sessions linked to our SG1 BYOC trunks? The standard recording endpoints work fine for PSTN, but the SIP trunk media seems to bypass the recording policy entirely. Here is the trunk configuration:

trunk:
 name: SG1-BYOC-Primary
 type: BYOC
 sip:
 registrar: sip.genesyscloud.com
 credentials:
 username: sg1_trunk_user
 password: encrypted
 failover:
 enabled: true
 priority: 1
 recording:
 policy_id: rec-policy-all
 enabled: true

The media streams appear active in the diagnostic logs, yet the recording service denies access immediately upon session start.