Scan verdicts

Decisions

A clean verdict means the evaluated scans did not require a hold or block; it is not a guarantee that software is safe. A hold keeps an artifact from installation while it needs further review or evidence. A block prevents installation because the policy or scan found a reason to deny it.

Policy, quarantine and upstream removals can also prevent installation. AI review is fail-closed when unavailable; a held result is not automatically cleared. Use why to inspect a decision.