The per-source targets summary derived a source's paths only from its path rewrites or path-shaped config, and marked it unresolvable when both were empty unless the descriptor declared emits_native_paths. That treats "no configured paths" as a misconfiguration for every source, but only a local watcher is handed its roots up front. A webhook source reads paths out of each delivery payload, and a source with a bound connection gets them from the provider's root folders — where empty rewrites are the correct steady state, not an omission. SuggestRewrites deliberately proposes nothing when a reported root already equals the Silo path (suggest.go:176), so a correctly configured shared-namespace deployment lands on exactly the state the row flagged as broken. Gate the warning on whether the paths could have been known from stored config at all, and report the rest as unknown. A local watcher with declared path fields left empty still warns — that is the silent-failure case the check exists for. Sources that do have rewrites are unaffected. Fixes #518 Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>