clearotron 0.3.2 → 0.3.3-beta.0

package/driver/suite-census.json

@@ -51,6 +51,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-batch-of-names-is-one-question-per-name-without-or.test.mjs": {
+          "tests": 4,
+          "asserts": 20,
+          "skips": 0,
+          "todos": 0
+        },
         "a-block-that-ran-and-said-nothing-is-not-a-block-that-never-ran.test.mjs": {
           "tests": 6,
           "asserts": 16,
@@ -87,6 +93,18 @@
           "skips": 0,
           "todos": 0
         },
+        "a-capability-gap-is-decided-once-per-run.test.mjs": {
+          "tests": 4,
+          "asserts": 17,
+          "skips": 0,
+          "todos": 0
+        },
+        "a-capability-gap-is-not-reopened.pipeline.test.mjs": {
+          "tests": 1,
+          "asserts": 6,
+          "skips": 0,
+          "todos": 0
+        },
         "a-capability-is-named-before-the-report-names-it.test.mjs": {
           "tests": 6,
           "asserts": 41,
@@ -124,8 +142,8 @@
           "todos": 0
         },
         "a-check-that-could-not-look-does-not-report-a-drift.test.mjs": {
-          "tests": 5,
-          "asserts": 10,
+          "tests": 10,
+          "asserts": 26,
           "skips": 0,
           "todos": 0
         },
@@ -141,6 +159,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-class-the-client-reaches-is-added-and-costs-one-question.test.mjs": {
+          "tests": 5,
+          "asserts": 17,
+          "skips": 0,
+          "todos": 0
+        },
         "a-clean-install-offers-generic-alone.test.mjs": {
           "tests": 9,
           "asserts": 14,
@@ -177,6 +201,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-common-law-coverage-status-is-read-as-data.test.mjs": {
+          "tests": 11,
+          "asserts": 42,
+          "skips": 0,
+          "todos": 0
+        },
         "a-company-can-be-given-a-framework-after-it-exists.test.mjs": {
           "tests": 8,
           "asserts": 19,
@@ -315,6 +345,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-deprecate-only-dispatch-publishes-nothing.test.mjs": {
+          "tests": 5,
+          "asserts": 8,
+          "skips": 0,
+          "todos": 0
+        },
         "a-depth-check-that-read-nothing-is-on-the-investigate-list.test.mjs": {
           "tests": 3,
           "asserts": 8,
@@ -423,6 +459,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-full-country-card-keeps-what-the-multi-country-card-shows.test.mjs": {
+          "tests": 2,
+          "asserts": 12,
+          "skips": 0,
+          "todos": 0
+        },
         "a-generic-run-is-filed-and-capped-at-the-claim.test.mjs": {
           "tests": 2,
           "asserts": 12,
@@ -435,6 +477,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-goods-slice-and-an-added-class-read-as-themselves.test.mjs": {
+          "tests": 5,
+          "asserts": 20,
+          "skips": 0,
+          "todos": 0
+        },
         "a-half-applied-connect-says-so.test.mjs": {
           "tests": 5,
           "asserts": 15,
@@ -447,6 +495,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-hard-error-gets-one-settle-attempt-per-run.test.mjs": {
+          "tests": 5,
+          "asserts": 15,
+          "skips": 0,
+          "todos": 0
+        },
         "a-hostile-line-is-read-in-linear-time.test.mjs": {
           "tests": 3,
           "asserts": 7,
@@ -459,6 +513,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-job-on-the-older-goods-spelling-scopes-the-same.test.mjs": {
+          "tests": 10,
+          "asserts": 23,
+          "skips": 0,
+          "todos": 0
+        },
         "a-jq-program-in-a-js-string-keeps-its-backslash.test.mjs": {
           "tests": 2,
           "asserts": 6,
@@ -519,6 +579,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-mark-too-short-for-contains-is-asked-exactly.test.mjs": {
+          "tests": 12,
+          "asserts": 57,
+          "skips": 0,
+          "todos": 0
+        },
         "a-matter-directory-nobody-created-is-visible.test.mjs": {
           "tests": 5,
           "asserts": 14,
@@ -795,6 +861,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-refused-search-is-not-a-dropped-one.test.mjs": {
+          "tests": 6,
+          "asserts": 12,
+          "skips": 0,
+          "todos": 0
+        },
         "a-refused-unit-says-what-is-half-started.test.mjs": {
           "tests": 9,
           "asserts": 31,
@@ -951,6 +1023,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-skipped-question-is-not-an-answer.test.mjs": {
+          "tests": 5,
+          "asserts": 12,
+          "skips": 0,
+          "todos": 0
+        },
         "a-source-the-classifier-could-not-read-is-not-empty.test.mjs": {
           "tests": 9,
           "asserts": 14,
@@ -1011,12 +1089,24 @@
           "skips": 0,
           "todos": 0
         },
+        "a-taken-port-is-retried-whatever-shape-the-result-has.test.mjs": {
+          "tests": 4,
+          "asserts": 16,
+          "skips": 0,
+          "todos": 0
+        },
         "a-terminal-guard-delivers-and-clamps.test.mjs": {
           "tests": 11,
           "asserts": 40,
           "skips": 0,
           "todos": 0
         },
+        "a-territory-the-engine-cannot-search-is-disclosed-not-wired.test.mjs": {
+          "tests": 4,
+          "asserts": 8,
+          "skips": 0,
+          "todos": 0
+        },
         "a-test-never-reaches-a-network-it-does-not-need.test.mjs": {
           "tests": 2,
           "asserts": 5,
@@ -1025,7 +1115,7 @@
         },
         "a-timer-is-asked-about-as-a-timer.test.mjs": {
           "tests": 7,
-          "asserts": 16,
+          "asserts": 17,
           "skips": 0,
           "todos": 0
         },
@@ -1035,6 +1125,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-turn-whose-every-tool-call-was-refused-is-not-retried.test.mjs": {
+          "tests": 3,
+          "asserts": 12,
+          "skips": 0,
+          "todos": 0
+        },
         "a-two-form-matter-owes-a-read-per-form.test.mjs": {
           "tests": 8,
           "asserts": 25,
@@ -1083,6 +1179,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-waiting-family-the-reading-turn-asks-is-asked.test.mjs": {
+          "tests": 3,
+          "asserts": 13,
+          "skips": 0,
+          "todos": 0
+        },
         "a-warm-turn-that-never-landed-costs-no-rung.test.mjs": {
           "tests": 4,
           "asserts": 20,
@@ -1149,6 +1251,12 @@
           "skips": 0,
           "todos": 0
         },
+        "an-absent-portal-bundle-is-not-a-stale-one.test.mjs": {
+          "tests": 4,
+          "asserts": 7,
+          "skips": 0,
+          "todos": 0
+        },
         "an-account-is-never-created-unable-to-start.test.mjs": {
           "tests": 7,
           "asserts": 26,
@@ -1203,6 +1311,12 @@
           "skips": 0,
           "todos": 0
         },
+        "an-escape-is-read-the-way-a-lexer-reads-it.test.mjs": {
+          "tests": 3,
+          "asserts": 11,
+          "skips": 0,
+          "todos": 0
+        },
         "an-evidence-demand-that-cannot-be-met.test.mjs": {
           "tests": 9,
           "asserts": 21,
@@ -1277,7 +1391,7 @@
         },
         "archive-index.test.mjs": {
           "tests": 15,
-          "asserts": 85,
+          "asserts": 87,
           "skips": 0,
           "todos": 0
         },
@@ -1875,6 +1989,12 @@
           "skips": 0,
           "todos": 0
         },
+        "ctrl-c-takes-the-demo-folder-with-it.test.mjs": {
+          "tests": 4,
+          "asserts": 10,
+          "skips": 0,
+          "todos": 0
+        },
         "dead-end-passage-is-named-not-blamed.test.mjs": {
           "tests": 8,
           "asserts": 24,
@@ -2109,6 +2229,12 @@
           "skips": 0,
           "todos": 0
         },
+        "doctor-does-not-tick-a-billing-mode-it-cannot-see.test.mjs": {
+          "tests": 5,
+          "asserts": 8,
+          "skips": 0,
+          "todos": 0
+        },
         "doctor-names-who-is-in-the-store.test.mjs": {
           "tests": 5,
           "asserts": 15,
@@ -2207,7 +2333,7 @@
         },
         "drainer-identity.test.mjs": {
           "tests": 17,
-          "asserts": 50,
+          "asserts": 51,
           "skips": 0,
           "todos": 0
         },
@@ -2326,8 +2452,8 @@
           "todos": 0
         },
         "engine-probe.test.mjs": {
-          "tests": 30,
-          "asserts": 143,
+          "tests": 34,
+          "asserts": 166,
           "skips": 0,
           "todos": 0
         },
@@ -2469,6 +2595,12 @@
           "skips": 0,
           "todos": 0
         },
+        "every-surface-that-takes-the-manifest-asks-for-the-goods-words.test.mjs": {
+          "tests": 10,
+          "asserts": 22,
+          "skips": 0,
+          "todos": 0
+        },
         "every-tool-declares-what-it-does.test.mjs": {
           "tests": 3,
           "asserts": 10,
@@ -2487,6 +2619,12 @@
           "skips": 0,
           "todos": 0
         },
+        "every-waiting-family-is-asked-or-withheld.test.mjs": {
+          "tests": 8,
+          "asserts": 29,
+          "skips": 0,
+          "todos": 0
+        },
         "example-replay.test.mjs": {
           "tests": 8,
           "asserts": 32,
@@ -2573,7 +2711,7 @@
         },
         "findings-model.test.mjs": {
           "tests": 68,
-          "asserts": 258,
+          "asserts": 259,
           "skips": 0,
           "todos": 0
         },
@@ -2685,6 +2823,12 @@
           "skips": 0,
           "todos": 0
         },
+        "generated-evidence-keeps-to-its-own-commit.test.mjs": {
+          "tests": 8,
+          "asserts": 18,
+          "skips": 0,
+          "todos": 0
+        },
         "giving-access-to-everything-is-a-switch-not-a-point.test.mjs": {
           "tests": 1,
           "asserts": 4,
@@ -2962,8 +3106,8 @@
           "todos": 0
         },
         "matter-frame-record.test.mjs": {
-          "tests": 25,
-          "asserts": 88,
+          "tests": 27,
+          "asserts": 100,
           "skips": 0,
           "todos": 0
         },
@@ -3029,7 +3173,7 @@
         },
         "no-client-surface-speaks-the-delivery-gates-word.test.mjs": {
           "tests": 4,
-          "asserts": 17,
+          "asserts": 21,
           "skips": 0,
           "todos": 0
         },
@@ -3251,7 +3395,7 @@
         },
         "pipeline.anthropic.test.mjs": {
           "tests": 3,
-          "asserts": 77,
+          "asserts": 78,
           "skips": 0,
           "todos": 0
         },
@@ -3545,7 +3689,7 @@
         },
         "provider-hard-error-deferral.test.mjs": {
           "tests": 16,
-          "asserts": 55,
+          "asserts": 56,
           "skips": 0,
           "todos": 0
         },
@@ -4431,6 +4575,12 @@
           "skips": 0,
           "todos": 0
         },
+        "setup-never-prints-a-piece-of-a-key.test.mjs": {
+          "tests": 3,
+          "asserts": 7,
+          "skips": 0,
+          "todos": 0
+        },
         "setup-promises-a-login-shell-only-when-one-adds-the-directory.test.mjs": {
           "tests": 3,
           "asserts": 8,
@@ -4809,6 +4959,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-census-will-not-stamp-a-half-finished-merge.test.mjs": {
+          "tests": 4,
+          "asserts": 13,
+          "skips": 1,
+          "todos": 0
+        },
         "the-citation-strip-removes-openers-and-nothing-else.test.mjs": {
           "tests": 18,
           "asserts": 51,
@@ -5025,6 +5181,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-heartbeat-stays-fresh-while-a-run-is-in-flight.test.mjs": {
+          "tests": 4,
+          "asserts": 8,
+          "skips": 0,
+          "todos": 0
+        },
         "the-hit-list-owes-one-fate-per-line.test.mjs": {
           "tests": 16,
           "asserts": 55,
@@ -5157,6 +5319,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-package-cannot-grow-unnoticed.test.mjs": {
+          "tests": 6,
+          "asserts": 12,
+          "skips": 0,
+          "todos": 0
+        },
         "the-package-ships-only-the-demo-customers.test.mjs": {
           "tests": 2,
           "asserts": 6,
@@ -5253,6 +5421,12 @@
           "skips": 1,
           "todos": 0
         },
+        "the-reading-turn-narrows-the-same-way-on-every-register.test.mjs": {
+          "tests": 5,
+          "asserts": 20,
+          "skips": 0,
+          "todos": 0
+        },
         "the-readmes-commands-run-as-written.test.mjs": {
           "tests": 2,
           "asserts": 5,
@@ -5289,6 +5463,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-release-note-guard-reads-a-pull-request-and-never-main.test.mjs": {
+          "tests": 4,
+          "asserts": 13,
+          "skips": 0,
+          "todos": 0
+        },
         "the-repair-order-and-the-tool-schema-agree.test.mjs": {
           "tests": 6,
           "asserts": 27,
@@ -5403,6 +5583,18 @@
           "skips": 0,
           "todos": 0
         },
+        "the-shape-read-prints-counts-and-writes-nothing.test.mjs": {
+          "tests": 5,
+          "asserts": 16,
+          "skips": 0,
+          "todos": 0
+        },
+        "the-short-surfaces-quote-the-report.test.mjs": {
+          "tests": 3,
+          "asserts": 7,
+          "skips": 0,
+          "todos": 0
+        },
         "the-sign-in-door-folds-its-administrator-help.test.mjs": {
           "tests": 5,
           "asserts": 23,
@@ -5471,7 +5663,7 @@
         },
         "the-updater-that-deploys-this-box-says-what-it-is.test.mjs": {
           "tests": 18,
-          "asserts": 59,
+          "asserts": 61,
           "skips": 0,
           "todos": 0
         },
@@ -5481,6 +5673,18 @@
           "skips": 0,
           "todos": 0
         },
+        "the-wider-families-wait-for-the-reading-turn-on-every-matter.test.mjs": {
+          "tests": 7,
+          "asserts": 23,
+          "skips": 0,
+          "todos": 0
+        },
+        "the-wider-families-wait-on-the-identical-question.test.mjs": {
+          "tests": 13,
+          "asserts": 49,
+          "skips": 0,
+          "todos": 0
+        },
         "the-worklist-comes-from-the-call-not-the-document.test.mjs": {
           "tests": 3,
           "asserts": 11,
@@ -6595,6 +6799,12 @@
           "skips": 0,
           "todos": 0
         },
+        "theListIsAskedForInParallel.test.ts": {
+          "tests": 3,
+          "asserts": 5,
+          "skips": 0,
+          "todos": 0
+        },
         "theStopNoticeHasItsOwnRow.test.ts": {
           "tests": 4,
           "asserts": 11,
@@ -6725,6 +6935,12 @@
           "skips": 0,
           "todos": 0
         },
+        "providers/clarivate/test/a-refused-query-is-named-with-its-size.test.mjs": {
+          "tests": 6,
+          "asserts": 22,
+          "skips": 0,
+          "todos": 0
+        },
         "providers/clarivate/test/phrase-value.test.mjs": {
           "tests": 6,
           "asserts": 23,
@@ -6803,6 +7019,12 @@
           "skips": 0,
           "todos": 0
         },
+        "providers/signa/test/an-exact-question-stays-ranked-above-the-floor.test.mjs": {
+          "tests": 3,
+          "asserts": 8,
+          "skips": 0,
+          "todos": 0
+        },
         "providers/signa/test/an-owner-portfolio-sweep-is-a-search.test.mjs": {
           "tests": 4,
           "asserts": 17,

package/driver/synthesis-record.mjs

@@ -181,7 +181,13 @@ export function uncarriedCoverageLimits(rows, ledger) {
   if (!Array.isArray(ledger) || !ledger.length) return null;
   const limited = ledger.filter((r) => {
     const st = String(r?.status ?? "").trim();
-    return st !== "" && st !== "confirmed-clean" && st !== "note";
+    // `withheld-by-judgment` sits beside `confirmed-clean` here, and the reason is the opposite one.
+    // A clean row has nothing to carry. A withheld row is a family the reading turn chose NOT to open,
+    // having read the identical question as a list and found what it needed — that is where the work
+    // was spent, not a slice the run could not clear, and the rule that nothing is added to the report keeps it out
+    // entirely. Demanding it be carried would put a "we did not search this" line in front of a lawyer
+    // about a decision that made the search better.
+    return st !== "" && st !== "confirmed-clean" && st !== "note" && st !== "withheld-by-judgment";
   });
   if (!limited.length) return null;                       // the run records no limit: nothing to carry
   const carried = (rows ?? []).some((r) => {
@@ -201,6 +207,66 @@ export function uncarriedCoverageLimits(rows, ledger) {
  * could assert either could waive its own contract — the same reason the reviewer's transport takes
  * `receiptPresent` from the driver rather than from the call.
  */
+/**
+ * The coverage rows a client may see, with every withheld family's row removed. PURE.
+ *
+ * `withheld-by-judgment` is the reading turn saying it chose not to open a family — it read the
+ * identical question as a list, found what it needed, and spent the work there. That is a decision
+ * about where effort went, not a gap in the client's search, and the rule that nothing is added to the report (2026-09-18) keeps it in the run record
+ * and the coverage ledger alone.
+ *
+ * Applied here rather than trusted to the model, because the model is the surface that can get it
+ * wrong: it authors these rows, it has been told the family was withheld, and a row reading "we did
+ * not search this" in front of a lawyer is the sentence that rule forbids — about a decision that
+ * made the search better. The LEDGER is the authority on which families were withheld.
+ *
+ * A row for a family the ledger holds as anything else is untouched, and that direction matters more
+ * than this one: a documented limit dropped by accident is a disclosure the reader is owed and does
+ * not get.
+ */
+export function withoutWithheldRows(rows, ledger) {
+  // A FAMILY IS ONLY WITHHELD IF THE LEDGER HOLDS NOTHING ELSE ABOUT IT. A family can be withheld at
+  // the axis level AND still carry a documented limit on one of its slices — measured: an axis whose
+  // whole-axis row is withheld while `primary-sweep (exact: <mark> [cl 25])` is a disclosed limit the
+  // synthesis gate then demands be carried. Dropping by family name alone deleted the carrying row and
+  // the run failed, which is the worse error stated twice over: a disclosure the reader is owed, gone,
+  // and a run that does not deliver.
+  //
+  // So a family qualifies only when EVERY ledger row for it is withheld. One row saying anything else
+  // keeps the whole family's rows, and that is the direction to fail in.
+  const byFamily = new Map();
+  for (const r of (Array.isArray(ledger) ? ledger : [])) {
+    const axis = String(r?.axis ?? "").trim().toLowerCase();
+    if (!axis) continue;
+    const isWithheld = String(r?.status ?? "").trim() === "withheld-by-judgment";
+    byFamily.set(axis, (byFamily.get(axis) ?? true) && isWithheld);
+  }
+  const withheld = new Set([...byFamily.entries()].filter(([, only]) => only).map(([axis]) => axis));
+  if (!withheld.size) return Array.isArray(rows) ? rows : [];
+
+  // ── THE AXIS IS NAMED IN A SEGMENT, NOT ALWAYS THE FIRST ONE ──────────────────────────────────
+  //
+  // This read `area.split("/")[0]` and was inert for the two shapes that matter most, failing OPEN —
+  // toward the client, which is the wrong direction for a gate whose whole job is to keep a row off
+  // the page. Measured against the real strings:
+  //
+  //   `incumbent-class (entire axis)`         no slash at all — the whole-axis row a client reads
+  //   `Register / incumbent-class`            the axis is the SECOND segment; the first is a layer
+  //   `incumbent-class / extra script group`  the only shape the first read caught
+  //
+  // So every `/`-separated segment is considered, with a trailing parenthetical stripped, and each is
+  // compared by EQUALITY against the axis names the ledger actually holds.
+  //
+  // Equality on a segment, never `includes`: a substring test over an open vocabulary is how one axis
+  // name once matched two unrelated areas, and here a false match DROPS a row — a documented limit the
+  // reader is owed, gone silently. The failure this gate prevents is a withheld row appearing; the
+  // failure it must not cause is a disclosure disappearing, and that one is worse.
+  const namesIn = (area) => String(area ?? "").toLowerCase().split("/")
+    .map((seg) => seg.replace(/\([^)]*\)/g, " ").trim())
+    .filter(Boolean);
+  return (Array.isArray(rows) ? rows : []).filter((r) => !namesIn(r?.area).some((n) => withheld.has(n)));
+}
+
 export function acceptSynthesis(params, { asks = [], ledger = null, manifest = null, owed = null, declined = null } = {}) {
   const doc = params?.findings;
   if (!doc || typeof doc !== "object" || Array.isArray(doc)) {
@@ -228,7 +294,19 @@ export function acceptSynthesis(params, { asks = [], ledger = null, manifest = n
   // Two copies that must agree is a second-authoring defect, so there are not two. The record is the
   // machine contract and the narrative's coverage list is RENDERED from it. Disagreement is not detected;
   // it is impossible.
-  const rows = Array.isArray(doc.coverage) ? doc.coverage : [];
+  // ── NOTHING ADDED TO THE REPORT: A FAMILY THE READING TURN DID NOT OPEN STAYS OFF IT, WHATEVER THE MODEL WROTE ──
+  //
+  // `withheld-by-judgment` is the reading turn saying it chose not to open a family — it read the
+  // identical question as a list, found what it needed, and spent the work there instead. That is a
+  // decision about where effort went, not a gap in the client's search, and it belongs to the run
+  // record and the coverage ledger alone.
+  //
+  // Dropped HERE rather than trusted to the model, because the model is the one surface that can get
+  // it wrong: it writes the coverage rows, it has been told the family was withheld, and a row saying
+  // "we did not search this" in front of a lawyer is exactly the sentence that rule forbids — about a
+  // decision that made the search better. The ledger is the authority on which families were withheld,
+  // so a row whose family it holds as withheld goes, however the row was authored.
+  const rows = withoutWithheldRows(Array.isArray(doc.coverage) ? doc.coverage : [], ledger);
   if (n.coverage?.rows !== undefined) {
     return { ok: false, reason: "synthesis_coverage_rows_misplaced: coverage rows belong in `findings.coverage`, not on the narrative — the driver renders the narrative's coverage list from the record, so there is one authored set and no way for the client's readable statement and the machine record to disagree. Send `narrative.coverage.read` for the prose" };
   }

package/driver/unit-file-drift.mjs

@@ -63,7 +63,7 @@ export function unitBody(text) {
  *                driver/unit-files.mjs wherever it sits, or null when the repo tracks none
  *     dropIns  — array of drop-in paths (may be empty)
  * @param {{ok: boolean, why?: string}} probe — could the caller enumerate at all?
- * @returns {{state: "pass"|"fail"|"skip", message: string, drifted: string[], templated: string[]}}
+ * @returns {{state: "pass"|"fail"|"skip", blocked?: true, message: string, drifted: string[], templated: string[]}}
  *
  * THREE OUTCOMES, and the third is the one this file exists for. "Could not look" is never "nothing is
  * wrong" — the lesson, applied to the arm that has the same failure mode one layer down: a unit
@@ -72,7 +72,7 @@ export function unitBody(text) {
  */
 export function unitFileDriftVerdict({ units = [], probe = { ok: true } } = {}) {
   if (!probe.ok) {
-    return { state: "skip", drifted: [],
+    return { state: "skip", blocked: true, drifted: [],
       message: `could not enumerate systemd units, so no unit file was COMPARED — ${probe.why ?? "no reason given"}. `
         + "This is a failure to look, not a finding about the deployment" };
   }
@@ -80,7 +80,7 @@ export function unitFileDriftVerdict({ units = [], probe = { ok: true } } = {})
   const unreadable = units.filter((u) => u && u.live == null);
   const untracked = units.filter((u) => u && u.live != null && u.tracked == null);
   if (!comparable.length) {
-    return { state: "skip", drifted: [],
+    return { state: "skip", blocked: true, drifted: [],
       message: `systemd answered and no unit could be compared to a tracked file (${units.length} unit(s) seen, `
         + `${unreadable.length} with no readable fragment, ${untracked.length} with no tracked unit file `
         + "anywhere in the tree) — nothing was checked" };