pub fn check_registered(command: &str) -> Result<(), ShellError>Expand description
Check command against the registered policy. Fails closed (refuses) when
no policy is registered, so a binary that forgot the registration can never
run unchecked commands.