An allergy record has two halves and a surface that shows only one of them presents a partial safety picture as a complete one.
The coded half is what a machine can match against a cart. The prose half — "mild shellfish intolerance, avoid cross-contamination" — carries the qualifier no pivot row can express. Vestibel returns both together, and every surface renders both, including when the coded check finds nothing.
An ungraded severity defaults to severe, never mild. An ungraded declaration is evidence that nobody asked, not evidence the reaction is minor, and a warning that under-states risk is worse than no warning because it invites a decision.
The check warns at the register and never blocks the order. The person eating is frequently not the person on the folio — a guest with a peanut allergy ordering satay for the table is the ordinary case — and a hard block is routed around by detaching the customer from the folio, which destroys the loyalty link, the history and the allergy record in one action.