pub fn verify_sqlite_load_extension_disabled(pool: &Pool) -> StoreResult<()>Expand description
Verifies SQL-level extension loading is not authorized on this connection.
The pinned bundled libsqlite3-sys build advertises
ENABLE_LOAD_EXTENSION, but rusqlite does not enable its
load_extension feature in this workspace and SQLite keeps SQL extension
loading disabled by default. Cortex checks that runtime state before
migrations instead of accepting compile options as proof of active authority.