Only Check evaluates severity. HIGH includes HIGH and CRITICAL version-confirmed matches. Product-only matches are reported without triggering this threshold. REPORT_ONLY disables only the severity gate; the incomplete-coverage policy is independent. Select the outcome below: UNSTABLE or FAILURE.