Several checks need an external service. Where one is missing, the app reports that the check did not run rather than reporting a pass.
You will see this on:
- Perceptual continuity checks — need a vision model.
- Loudness —
measured: falsewithout FFmpeg; the number shown is a structural estimate. - C2PA manifests — written but marked unsigned without a certificate.
- Image IP fingerprinting —
imageChecked: falsewithout a rights database. The text check still runs. - CSAM screening — this one throws rather than returning a clean result, and correctly blocks public launch.
This is deliberate and consistent. A green check that never looked is worse than a missing check, because you act on it.
/admin/readiness lists all of these live against your configuration.