pub fn static_guard(line: &str) -> Option<Rule>Expand description
A force push, a seat deny rule, an rm -rf outside a temp directory,
or a commit, push, or merge the gates refuse, judged in this process.
None means the slow check may run. A timeout there allows the line
with a warning.
A temp home is not a seat unless LJOS_GUARD=on, and this returns
None there too, past the sitting gate (sitting_gate::guard_line),
which judges a runner’s history writes under any home and with
LJOS_OFF set. A temp working directory is still judged.
cwd is the directory the command would run in. Absent, the process
directory. The gates read that checkout’s .ljos/gates.toml and tip.