Function verification_incomplete 

fn verification_incomplete(
    root: &Path,
    reason: IndexVerificationReason,
    source: &CliError,
) -> CliError

Convert a policy/root preflight failure into a non-destructive read refusal.