Static MARKER 

static MARKER: &str

Global marker recording the scan and repair reached a verdict.

A decline stamps it like a settled repair, so no residue causes a rescan on later boots; the decline’s counters become the value where a settled repair leaves it empty. Only an error leaves it unwritten, and an error fails the boot. Every reader tests presence only.