Function has_embedded_layer 

pub fn has_embedded_layer(harness: Harness) -> bool

True when harness has an embedded built-in descriptor among its sources — i.e. it is not defined by user-supplied descriptor files alone. Preflight uses this to hard-reject --guard on user-only harnesses (the write guard stays restricted to built-ins because it fails open).