Function is_stopped_at 

pub fn is_stopped_at(evidence: &ShipEvidence) -> bool

Whether finished_reason names the --until clean-stop branch, so callers (the CLI’s --require-shipped failure message) can say “it finished but it did not ship” instead of a generic “not shipped” — the confusing case a reader hits first, per the plan’s Task 1 acceptance criteria.