This scan reads the HTML your server sends, your content security policy and the contents of your Tag Manager container, without running JavaScript. What it cannot tell you is the part that decides compliance: whether your banner actually holds those tags back before a visitor chooses, and what fires anyway.
Nothing detected is inconclusive, never a clean bill. The full audit is the honest next step.


