Function overall 

pub fn overall(
    states: &[AdapterState],
    local_rules_ignored: bool,
) -> FirewallStatus

The overall status from every adapter. One covered adapter is enough for “ok”: a host also has virtual adapters (VMware, WSL, Hyper-V) that are rightly uncovered, and they must not flag a machine whose real LAN works. Otherwise the most actionable problem wins: a block, then a managed policy (no helper can help), then missing rules, then an untrusted Public network.