Read release verdicts, finding decisions, policy reasons and coverage together.
Execution, finding and release are different
A completed scan means execution produced a result; it does not mean PASS. A finding has severity and its own BLOCK, WARN or INFO decision. The release verdict aggregates those decisions with required analyzer coverage. Read the finding and release decision model for the full precedence rules.
BLOCK takes precedence when a finding blocks. Without a blocker, missing required coverage produces INCOMPLETE; complete coverage with warnings produces WARN; complete coverage without blockers or warnings produces PASS. NO DECISION is the presentation for a missing recorded verdict, not a fifth release verdict.
Read the policy that applied
Open the scan’s decision explanation. Check the recorded policy version, fail-on threshold, finding counts and missing coverage. Structured reason codes identify why the decision was made; analyzer gaps include their recorded reason and owner where available.
Under the engine’s default confidence enforcement, severity at the fail-on threshold is not sufficient on its own: HIGH confidence supports blocking, MEDIUM needs corroboration, and LOW warns. Imported evidence can carry a relaxed-policy override; the backend preserves the finding’s stored decision. See policy and confidence.
Example: a completed scan with a gap
A HIGH finding has WARN status and required dependency analysis failed. The execution may be completed while the release is INCOMPLETE. If the scan also contains a stored BLOCK finding, the release is BLOCK and the coverage gap remains visible.
The decision timestamp records when the verdict was saved. Age and newer-execution indicators help you judge freshness; they do not silently expire a verdict or re-evaluate old policy. A release exception is available only when the backend says that scan is eligible. Legacy records can carry PASS or WARN with unknown coverage; read that uncertainty explicitly. A PASS does not establish that every vulnerability is gone.