Derives the session a grant activates, the same one the device computes.
Neither side sends a key: both derive it from the nonces the join exchange carried, so the network can read what the device it just admitted sends.
The address and settings granted.
The 16-byte application root key the device shares.
The nonce the matching join-request carried.
The session to secure this device's traffic with.
If the key or the channel list is the wrong length.
Derives the session a grant activates, the same one the device computes.
Neither side sends a key: both derive it from the nonces the join exchange carried, so the network can read what the device it just admitted sends.