Unknown
In shortThe device could not measure something. It is shown separately and never counted as a pass.
Where it sits in EndLayer · step 6 of 7, decision
What it means
EndLayer's rule is simple: the device reports, your policy decides, and unknown is never counted as a pass. A check that could not run has not passed.
Why it matters
Treating missing evidence as success is how false confidence starts.