Read-only dependency review
A bounded review with no writes routes to NO_BLUEPRINT / BYPASS. The output still asks the reviewer to record evidence and uncertainty.
Contained interface adjustment
One reversible component, explicit owner authority and targeted checks routes to PK_ONLY / COMPRESSED_DR_CT_EX. The lifecycle cannot expand beyond that component.
Authentication plus billing change
Several systems, high consequence and full verification routes to FP_MS_AP_PK / FULL_DR_CT_EX—but only when authority and external operations are explicit.
Unapproved deployment action
An external deployment with missing authority produces HOLD_SCOPE_UNCLEAR / HOLD. The tool names the missing owner, operation and verification boundary.