diff --git a/crates/presentation/src/handlers/webhook.rs b/crates/presentation/src/handlers/webhook.rs
index 335c8a8..58c2a58 100644
--- a/crates/presentation/src/handlers/webhook.rs
+++ b/crates/presentation/src/handlers/webhook.rs
@@ -265,6 +265,7 @@ pub async fn get_watch_queue(
     responses(
         (status = 200, body = ConfirmWatchResponse),
         (status = 401, description = "Unauthorized"),
+        (status = 403, description = "Forbidden — not your watch event"),
     ),
     security(("bearer_auth" = []))
 )]
@@ -296,6 +297,7 @@ pub async fn post_confirm_watch_events(
     responses(
         (status = 200, body = DismissWatchResponse),
         (status = 401, description = "Unauthorized"),
+        (status = 403, description = "Forbidden — not your watch event"),
     ),
     security(("bearer_auth" = []))
 )]