Function detection_enabled 

pub fn detection_enabled(
    global_enabled: bool,
    route_enabled: Option<bool>,
) -> bool

The route toggle’s request-time semantics.

route_config.enable_suspicious_detection: a route carrying the flag overrides the global enable_penetration_detection in both directions; without a route flag the global value applies.