Anchore Enterprise in our organization is responsible for using Anchore policy to determine whether the scan has passed or failed. STO ingestion should consider Anchore authoritative for pass/fail status.