A judge pass that failed lost the set of manifests the take-in newly wrote, which lived only in its memory: the next pass found no verdict, took each as accepted before any verdict (ADR 0579 §1), and wrote a refusal as a warning. The take-in now keeps each new digest in the indexer's own state unjudged before it writes the module naming it; every judge pass judges those as fresh and ends a key once its verdict is written or no module holds it. indexer_read_unjudged reads the state; indexer_judge judges it again by hand. Claude-Session: https://claude.ai/code/session_01JG73KEq4zoDfM9WtYpcQgZ