QG201 Undecided¶
| Type | Info |
| Severity | none: it reports what the scan could not decide or describe |
| Front end | a policy and a synthesised host |
| Guardrail category (Vassilev 2026) | F. Monitoring, Auditing & Logging Guardrails |
| AI RMF functions (NIST AI 100-1) | MEASURE, MANAGE |
| OWASP | none: a statement about the scan: a question it did not decide |
| Gates by default | no, unless the project's quality profile adds it |
Raised when¶
An obligation neither refuted nor shown reachable within its budget, or a satisfying assignment that did not survive verification.
Why it matters¶
No verdict is not a pass. The obligation is reported with what it would take to decide it.
How to fix it¶
Pin the conditions listed, raise the budget, or split the obligation.
What the finding carries¶
A location in the document the team edits, a fingerprint that survives unrelated edits, a reproduction (a transcript replayed against NeMo Guardrails for a policy, a dialogue case played through the selector for a router, or the gate's inputs reproduced by agreement), and, where the scan can produce one, a fix whose re-scan it has already run. See the catalogue for the other rules.