Fini Proof · CLI 0.6.4
NOT_MEASURED is a result, not a pass.
NOT_MEASURED in fini-proof 0.6.4 means a check could not be completed. That verdict exits 3. A licence refusal exits 4, even when the printed line says NOT_MEASURED.
Exit codes in the README are 0 PASS, 1 FAIL, 2 usage error, 3 NOT_MEASURED, and 4 licence refused. A run that cannot check something names that fact. Silence is not converted into a green result.
Conditions the 0.6.4 README names for the NOT_MEASURED verdict include an unreadable file, a missing base branch, no files to check, and a check that missed its planted defect. Those exit 3. A licence refusal prints a NOT_MEASURED line and exits 4. A shallow git clone is also NOT_MEASURED, which is why the CI example fetches full history.
NOT_MEASURED does not mean the code is safe, and it does not mean the code is unsafe. It means this run does not contain a measurement you can treat as evidence. The next step is to remove the blocker and run the check again.
Uploaded records are a separate question. The 0.6.4 README says an uploaded run reads SELF_REPORTED until a hosted verifier key is provisioned. The package ships an empty trusted keyring for that signature. SELF_REPORTED is not PROVEN.