Review limits

What a Veridical result does and does not establish

• A completed review can still miss defects.
• A stale, failed, superseded, partial, or cannot-run result is not a clean result.
• Safe-to-merge is advisory and never merges code.
• Repository content is untrusted. Execution runs in isolation and may be skipped when a required runtime, dependency, or safe execution path is unavailable.
• Very large pull requests may take longer, consume more capacity, or require an explicit scope decision before provider work begins.
• GitHub is the supported forge for the hosted product.

When coverage is partial, Veridical publishes independently verified surviving findings and labels the review accordingly. It withholds the entire publication only when exact-head safety, lineage, persistence, final verification, or budget integrity cannot be established.