The low-confidence review list currently records pages to inspect, but the earlier loop has already added those pages to chunks.jsonl. A consumer that embeds that file will still index the suspect OCR unless the quarantine is applied before the write or enforced by the downstream loader.
I would split accepted and review-required records explicitly, while retaining a manifest entry for every source page, including failures and blanks. That lets an answer say a page is unavailable rather than silently treating missing extraction as missing information. A mixed PDF with one unreadable scanned page would make a useful end-to-end fixture.