pub(super) async fn repair(services: &Services, scan: &Scan) -> Result<bool>Expand description
Applies whatever repair the scan cleared, in hazard order.
The cache-clearing lane runs on any dirty chain and is unconditionally safe; the destructive lane runs only when no anomaly impugned the scan. Returns whether the residue settled: a refusal reports false so the caller leaves the marker unwritten and the next boot scans again, while an anomaly with nothing to repair settles with a warning instead.