Two Hundred And Sad

An API returns HTTP 200 for every request and signals failure with a body like {"ok": false, "message": "invalid email"}. Integrators keep reporting that their retry and alerting logic never notices failures. What is the fix?