X_SEAL_CALL_UNSCANNED

the rule's seam was not among the files scanned

SEAL_SEAM or STANDARD_CIPHERS in scripts/seal-calls.ts names a module that has moved, so its exemption names nothing and a clean run proves nothing

edit SEAL_SEAM or STANDARD_CIPHERS in scripts/seal-calls.ts to name the modules that call the cipher, then bun run seal-calls --json