Trust abra fully for any image whose tag it can read — a normal semver/calver tag with no newer version is genuinely up-to-date. Only cross-check upstream for images abra physically can't parse (tag+digest pins, digest-only pins), which is the actual immich blind spot. Avoids redundant upstream checks on every recipe.