Forman says "all errata applied" but also say there are 18 errata to apply"

Problem: I need the status of the hosts to indicate the update status.

Expected outcome: consistency

Foreman and Proxy versions: 2,1 3.16rc5

Foreman and Proxy plugin versions: bootdisk remote execute

The “errata” property has given me no end of grief. I don’t trust it one bit. Here it says everything is fine (all errata applied), but the next tab show otherwise

Where does that filed get its information? pulp? ssh? subscription-manager?
(katello agent NOT installed but the katello tools are)