Function check_run 

pub fn check_run(
    grants: &CheckoutGrantStore,
    approvals: Option<&ApprovalStore>,
    req: &RunRequest<'_>,
) -> Result<RunVerdict, RunRefusal>

Decide req. approvals is None when this node has no approval store (no mesh): every Cognitum run is then refused for no_approval once the grant check passes.