You are not holding it wrong, you are describing the trade the feature makes. Healing keeps a suite running through a refactor; it is not there to certify the DOM.
Nothing about a heal is quiet, though. Every one is attached to the scenario as sdods/heal/<step>/<n>, appended to heal.jsonl in the run directory, added to the test annotations, and logged with the selector that won and a suggested rewrite. The failure mode you hit is that nobody read any of it.
If you want it off, the honest switches are:
heal: { enabled: false } in envs/<env>.yaml — the env layer may override healSDODS_HEAL=false for a single run- trimming
heal.actions to the actions you accept, remembering that arrays replace rather than merge .raw on a specific locator when you want exactly that element and no substitute
What I would actually do is leave it on and gate on the report instead. A green run with fourteen heals in it is a signal, and sdods heal report --last puts it on one screen.