pub fn trust_document(report: &TrustReport) -> ValueExpand description
devp trust --json: what the tool guarantees, and what this machine has switched on.
Guarantees and machine state stay in separate arrays because they are different kinds of claim — one is structural and one is a reading — and flattening them would let a consumer treat a setting as a promise.