Health-check status: error

error is the one status distinction this app treats as a hard requirement (spec §11.3): a check that couldn't run to completion — a DNS resolver timeout, a missing Spamhaus DQS API key, a network error mid-lookup — is reported as error, never silently folded into pass or fail. An unresolvable check is not a passing check, and it's also not proof of a real problem.

healthGrade()'s worst-status-wins logic (used for the domain-list posture badges) ranks error above warn specifically so a blind spot never quietly looks healthier than a known, minor issue.