What does “no issue detected” mean?

It means the selected BookPreflight rule set did not detect a covered issue. KDP may apply additional automated or manual review, so this is not an acceptance guarantee.

When is a repair called safe?

A deterministic operation must preserve visible content and aspect ratio, avoid new errors, pass a render comparison and pass a complete post-flight. Otherwise it requires your choice or manual work.

When is a credit consumed?

A credit is first reserved. It is committed only after the eligible job succeeds under policy. System failures and unsafe rejections release the reservation automatically.

Can a PDF run embedded scripts?

No. Uploaded files are quarantined; active actions, JavaScript, embedded files and risky links are detected before isolated processing. Workers have no network access by default.

How do I report a security issue?

Use the private security contact described in SECURITY.md. Do not paste sensitive PDF content into a public issue or general feedback form.