"Already compliant" is a success state

swapoff -a exits with rc=64 when there's no swap to disable — which failed an Ansible task on nodes that were already correct.

Idempotent automation treats the desired state as success, including when there is nothing to change:

- name: Swap off if any swap exists
  shell: |
    if swapon --show | grep -q .; then
      swapoff -a && echo "swap disabled"
    else
      echo "no swap present - already compliant"
    fi
  register: swap_task
  changed_when: "'swap disabled' in swap_task.stdout"

Related: changed_when: 'stdout is defined' fails on newer ansible-core — use register: and reference the variable. Registering the result makes the condition portable.