Function load_for_config 

pub fn load_for_config(
    cfg: &MissionConfig,
    repo_root: &Path,
) -> Result<Option<Pack>, String>

Load the pack a mission config points at (packDir, repo-relative when not absolute). No key ⇒ Ok(None) — the byte-identical pack-less path. A key pointing at a non-directory or a non-pack is a misconfiguration and fails closed, exactly like an invalid manifest.

Flight Rules trust (KRZ-341 D-A/D-J): a repo-relative packDir is only standards::StandardsTrust::RepoTracked when its manifest is actually tracked beneath this repository. Absolute, symlink-escaped, and untracked paths are standards::StandardsTrust::External — advisory rules load, enforced ones fail closed naming the remedy. Approval reads repo-relative packs from the pinned base tree through resolution::approval_pin.