How to tell whether an AI finding should block release
Severity, repeatability, audience, and actions matter more than fear.
Use policy plus judgment. Critical action or data exposure on a launch-critical surface usually blocks.
Decision frame
Can it affect public users? Can it trigger an action or leak sensitive context? Is it repeatable?
If yes to several, Fix or Blocked is likely. Retest before calling it resolved.