The Ansible pre-task that suppresses the SQL check covers the o9ansibleuser reboot. TrustedInstaller.exe can still fire a second 1074 in the same 6 minute window for an Operating System Upgrade. Maintenance that closes when Ansible finishes will start paging into the chained reboot and treat a clean SCM stop as a database crash. Any Automatic service on that host would page the same clean stop. The monitor is bound to the app, Ansible and TrustedInstaller own the box, and those three share a machine without sharing a window.