quiet

const (
	// AppUnread: the installations endpoint was not readable. The token may
	// simply not see installations on this organisation.
	AppUnread AppCoverage = iota
	// AppAbsent: read, and no Renovate App is installed.
	AppAbsent
	// AppPresent: read, and the Renovate App is installed.
	AppPresent
)

const (
	// Healthy: it ran, and the next occurrence it owes is not yet due.
	Healthy Verdict = "healthy"
	// MissingSecret: the workflow references a secret that exists in neither the
	// repository's nor the organisation's listing. The runner will start, run
	// with an EMPTY STRING where the secret should be, and fail.
	//
	// ⭐ IT NAMES THE FIX INSTEAD OF POINTING AT A LOG. Broken says "read that
	// run's logs and check the secret"; this says which secret, having checked.
	// The sixteen organisations of 2026-10-31 were exactly this, invisible for
	// ten days because nothing compared what the workflow asked for against
	// what existed.
	//
	// ⚠ IT REPLACES Broken OR NeverFired, AND NEVER Healthy. Only the
	// repository's secret listing can be read -- the organisation's needs
	// admin:org, which this fleet's token deliberately does not have -- so a
	// name absent from it proves nothing on a runner that WORKS: a successful
	// run is itself proof the secret resolves. On a failing one the same
	// absence is the cause. A healthy runner carries the fact on its line
	// instead, so nothing is hidden and nothing cries wolf.
	MissingSecret Verdict = "missing_secret"
	// Broken: the schedule fires on time and every run it produces FAILS.
	//
	// ⛔⛔ THIS TOOL REPORTED SIXTEEN OF THESE AS `healthy`. On 2026-10-31,
	// sixteen organisations had their Renovate runner failing in about ten
	// seconds every night -- `RENOVATE_TOKEN` was never set, and an unset secret
	// expands to the empty string -- so NONE of them had ever received a
	// dependency update. go-approx's entire history was 11 runs, 11 failures,
	// zero successes. This file asked WHEN the last run started and never what
	// became of it, so all sixteen were timely, and timely read as fine.
	//
	// ⭐ THE LESSON IS THE MEASUREMENT'S SUBJECT, NOT THE MISSING FIELD.
	// `redscan` caught them only incidentally, because the runner's workflow
	// happens to live on a default branch. The specialised sweep -- the one whose
	// whole job is Renovate runners -- was the one that said nothing. Activity is
	// not health, and a runner that fails fast is the most active-looking
	// failure there is.
	Broken Verdict = "broken"
	// NotYetDue: it has never run, but its first scheduled occurrence has not
	// arrived. This is NOT the same as never having fired, and conflating the
	// two is what produced a false alarm about 26 dead runners that were merely
	// queued behind a schedule they had not reached.
	NotYetDue Verdict = "not_yet_due"
	// NeverFired: it has never run and its first occurrence is long past.
	NeverFired Verdict = "never_fired"
	// Overdue: it ran once, and the occurrence after that is long past.
	Overdue Verdict = "overdue"
	// DisabledInactivity: GitHub switched the schedule off after 60 days with
	// no push. Re-enabling starts the same 60-day clock again.
	DisabledInactivity Verdict = "disabled_inactivity"
	// DisabledManually: a person switched it off. One runner in this fleet is
	// deliberately retired, so this is reported and never paged on.
	DisabledManually Verdict = "disabled_manually"
	// Archived: the repository is archived. Nothing can be pushed to it.
	Archived Verdict = "archived"
	// NoSchedule: the workflow exists but carries no cron -- dispatch-only, so
	// nothing will ever start it on its own.
	NoSchedule Verdict = "no_schedule"
	// Covered: this organisation has no runner of its own and does not need
	// one -- a shared runner's autodiscoverFilter reaches it, or the Renovate
	// App is installed on it. Reporting these as missing runners is how a
	// watcher earns 199 lines nobody reads.
	Covered Verdict = "covered"
	// CoverageUnknown: no runner and no filter reaches it, and whether the
	// Renovate App does could not be read. An unread installation is unread,
	// not absent -- the same rule as an autodiscoverFilter that will not parse.
	CoverageUnknown Verdict = "coverage_unknown"
	// NoRunner: no runner reaches this organisation at all -- neither one of
	// its own nor any shared runner's filter. A recency check over runners
	// structurally cannot see this: there is no runner to be quiet.
	//
	// Whether the organisation holds an empty `.github` repository or none at
	// all is a detail of the same gap, so it is said in the line and not split
	// across two verdicts. One number that means one thing is the point.
	NoRunner Verdict = "no_runner"
	// Unreadable: the API would not say. Reported, never silently counted as
	// healthy -- a channel that cannot answer must not read as "fine".
	Unreadable Verdict = "unreadable"
)