private boolean serviceEffectivelyDown(ServiceInstance service) throws HostStateChangeDeniedException {
        if (hostStatus(service.hostName()).isSuspended()) return true;

        return switch (service.serviceStatus()) {
            case DOWN -> true;
            case UNKNOWN -> throw new HostStateChangeDeniedException(
                    nodeGroup,
                    HostedVespaPolicy.UNKNOWN_SERVICE_STATUS,
                    "Service status of " + service.descriptiveName() + " is not yet known");
            default -> false;
        };
    }
A description of the hosts outside the group that are allowed to be down,
and a description of the services outside the group and outside of the allowed services
that are down.
orchestrator/src/main/java/com/yahoo/vespa/orchestrator/model/ClusterApiImpl.java